{"id":"CGA-463c-7733-7j5c","modified":"2026-10-10T05:34:45.263192296Z","published":"2026-10-09T15:06:37Z","upstream":["CVE-2026-107384","GHSA-v6pj-gxxw-phfw"],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/107xxx/CVE-2026-107384.json"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/144b8f4ef29539a9fb4b75d972b9dcdac4088b4e"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/6743b2f4a89b074268b44c650170767f35e1fb5d"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/8eb450972ff0f3826d7d45c071a42240798bc826"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/b9b04ec82a60b2caf2b0c038259ca9aff5d7014a"},{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.2.5"},{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.3.4"},{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.4.7"},{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4"},{"type":"ADVISORY","url":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-v6pj-gxxw-phfw"},{"type":"WEB","url":"https://hackerone.com/reports/3889198"},{"type":"WEB","url":"https://jira.mariadb.org/browse/CONJS-369"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107384"}],"affected":[{"package":{"name":"sqlpad","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/sqlpad?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"latest_event_timestamp":"2026-10-09T15:06:37Z","component_name":"mariadb","component_version":"3.5.3","component_type":"npm","component_location":"/usr/bin/sqlpad-server/yarn.lock","component_purl":"pkg:npm/mariadb@3.5.3","latest_event_status":"detection"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-463c-7733-7j5c.json"}},{"package":{"name":"sqlpad","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/sqlpad?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"component_name":"mariadb","component_version":"3.5.3","component_type":"npm","component_location":"/usr/bin/sqlpad-server/yarn.lock","component_purl":"pkg:npm/mariadb@3.5.3","latest_event_status":"detection","latest_event_timestamp":"2026-10-09T15:06:37Z"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-463c-7733-7j5c.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}