TI-2025-12520 CVE-2025-13699 · GHSA-rqf2-8625-4vgv
Path traversal in MariaDB
Priority LOW 33
MariaDB mariadb-dump Utility Directory Traversal Remote Code Execution Vulnerability.
RHSA-2026:0247
mariadb:10.11 security update
Released 2026-01-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.aarch64::mariadb:10.11, galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.ppc64le::mariadb:10.11, galera-26.4.20-1.module+el9.5.0+22578+dc54e53f.s390x::mariadb:10.11 +47
Fixes 8 records
TI-2025-21995 CVE-2025-30722 · GHSA-53hw-hvww-v6v8
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).
Priority LOW 31
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).
TI-2026-17667 CVE-2026-21968 · GHSA-3wrf-gw7c-pqjp
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
Priority LOW 29
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
TI-2025-21966 CVE-2025-30693 · GHSA-2cqp-v7m3-p6hm
Improper access control in Oracle MySQL Cluster
Priority LOW 27
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
TI-2025-15451 CVE-2025-21490 · GHSA-rh26-2566-h5m7
Resource allocation without limits in Oracle MySQL Server
Priority LOW 25
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).
TI-2023-29279 CVE-2023-52971 · GHSA-j57w-cc2h-3w6w
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
Priority LOW 23
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
TI-2023-29278 CVE-2023-52970 · GHSA-g8xg-6v3j-w97f
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0…
Priority LOW 23
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and 11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.
TI-2023-29277 CVE-2023-52969 · GHSA-gx7h-6fr6-j29h
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0…
Priority LOW 23
MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log.