{"id":"CVE-2026-55858","summary":"MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client","details":"MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.","aliases":["GHSA-xvr9-35cr-46v9"],"modified":"2026-08-30T08:17:20.225480Z","published":"2026-08-28T22:46:40.114Z","related":["CGA-rm7p-vr95-grw6"],"database_specific":{"cwe_ids":["CWE-838"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55858.json","cna_assigner":"GitHub_M"},"references":[{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/2.7.14"},{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.3.5"},{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.4.3"},{"type":"WEB","url":"https://github.com/mariadb-corporation/mariadb-connector-j/releases/tag/3.5.9"},{"type":"WEB","url":"https://jira.mariadb.org/browse/CONJ-1317"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55858.json"},{"type":"ADVISORY","url":"https://github.com/mariadb-corporation/mariadb-connector-j/security/advisories/GHSA-xvr9-35cr-46v9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55858"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6"},{"type":"FIX","url":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mariadb-corporation/mariadb-connector-j","events":[{"introduced":"0"},{"introduced":"6f7aba384d47f97c4e4e98b19f677415c7084db7"},{"introduced":"c19f608838fdcb18fa81cab8a607afdaa5131a58"},{"introduced":"8be57f3b4bd0b1112cf871d9426beda6919b3bb7"},{"fixed":"defeee068496e3f6312e775c7de864f1b06388d4"},{"fixed":"f522a2f560c6e07d1d4b9a7957ed31bc57038af4"},{"fixed":"606bb6d6cf8fc02dc723ec468b5f753680da0993"},{"fixed":"df4ebe2c61293b7a79ab9dd440199544305d1f38"},{"fixed":"300716bef1e1d0370a41be7863b88aa2d55fbb69"},{"fixed":"7b3c69221b5463ee03472654040b3f6b9e5329c7"},{"fixed":"8cfd9df697372ad4ed09fe87a34b34babb6d43d6"},{"fixed":"c555c9b477521be0c35c3a5461f9f46681553607"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"2.7.14"},{"introduced":"3.0.0-alpha"},{"fixed":"3.3.5"},{"introduced":"3.4.0"},{"fixed":"3.4.3"},{"introduced":"3.5.0"},{"fixed":"3.5.9"}],"source":["AFFECTED_FIELD","REFERENCES"]}}],"versions":["3.5.8","2.7.13","3.5.7","3.5.5","3.5.4","3.4.2","3.3.4","3.5.3","3.3.3","3.4.1","3.5.2","3.5.1","3.5.0","3.4.0","2.7.12","2.7.11","3.3.2","3.3.1","2.7.10","3.1.4","2.7.9","3.1.3","2.7.8","2.7.7","3.0.9","3.0.8","3.0.7","3.0.6","2.7.6","2.7.5","3.0.3","2.7.4","3.0.0-alpha","2.7.3","2.5.3","2.5.2","2.5.1","2.4.0","2.3.0","2.2.6","2.2.5","2.2.4","2.2.3","2.2.2","2.2.1","2.2.0","2.1.2","2.0.0-RC","1.5.9","1.5.8","1.5.6","1.5.5","1.1.9","1.5.3","1.4.4","1.4.3","1.4.2","1.4.1","1.4.0","1.3.7","1.3.6","1.3.5","1.3.4","1.3.3","1.3.2","1.3.1","1.3.0","1.3.0-beta-3","1.3.0-beta-2","1.3.0-beta-1","1.2.2","1.2.0","1.1.8"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55858.json","vanir_signatures_modified":"2026-08-30T08:17:20Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"83269857744660453164042627970215848843","length":392},"id":"CVE-2026-55858-00ee3674","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69","target":{"function":"readOkPacket","file":"src/main/java/org/mariadb/jdbc/internal/protocol/AbstractQueryProtocol.java"}},{"digest":{"line_hashes":["169083957468981638302754390285543980127","126209630680273579542951058218471766874"],"threshold":0.9},"id":"CVE-2026-55858-018483af","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/client/Context.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/defeee068496e3f6312e775c7de864f1b06388d4","target":{"file":"src/test/java/org/mariadb/jdbc/BaseTest.java","function":"isMaxscale"},"deprecated":false,"digest":{"function_hash":"185210897925734049027086244423075167776","length":319},"id":"CVE-2026-55858-0460b895"},{"signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/client/impl/StandardClient.java","function":"setupConnection"},"deprecated":false,"digest":{"function_hash":"328525752272272363407971487762202899511","length":763},"id":"CVE-2026-55858-0500d8df","signature_type":"Function"},{"id":"CVE-2026-55858-144f98c2","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/BaseContext.java","function":"BaseContext"},"deprecated":false,"digest":{"function_hash":"145062838147592063290990126600864803910","length":1056}},{"source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/RedoContext.java"},"deprecated":false,"digest":{"line_hashes":["339078095012037207263006241791088881436","282462384632390348976943409376392640132","298554498926989299115668928667248931648","229389758129119923201557116126793738827","101354515362108352360413703928704296840","223478000264895395765883089349160429636","21779027667049054726320383262463315189","230214156240815697392763113397555350389"],"threshold":0.9},"id":"CVE-2026-55858-1f420e00","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["108126810956377373627929326655088460816","234646842551842129453913986579893056659","176075496832642647718510931185429763365","217960775189434387483118335278006291673","217524743193090627370686202641201205608","69523070838793646219008658215386502787","48744749762328844931125276328863976867","317055784719653928900124769566977535911","298979695649793026627902059554757367780","240241613757957158500482921626762098958","82406944180098221705568554266306887925","169039161866852585350259899370992777404","161264294039334878944526427520248628820","309204416129595178819663103213171355088","33858582540409798098603920958013547402"],"threshold":0.9},"id":"CVE-2026-55858-1f50a6a0","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/client/impl/StandardClient.java"}},{"deprecated":false,"digest":{"function_hash":"138441224477496701994253688340379127644","length":791},"id":"CVE-2026-55858-245b67a4","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69","target":{"file":"src/main/java/org/mariadb/jdbc/internal/protocol/AbstractConnectProtocol.java","function":"sendSessionInfos"}},{"deprecated":false,"digest":{"function_hash":"317706985590382896644017645672450768487","length":740},"id":"CVE-2026-55858-25484f2c","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/BaseContext.java","function":"BaseContext"}},{"id":"CVE-2026-55858-31bdda68","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/RedoContext.java"},"deprecated":false,"digest":{"line_hashes":["421391505656672675225664198878644298","313543321507051877004795267011674752382","73580464730436916612087533538960482463","191280674298438312427720029914384041126","39113553787858527291886234376555851768"],"threshold":0.9}},{"id":"CVE-2026-55858-359a5445","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/BaseContext.java"},"deprecated":false,"digest":{"line_hashes":["281940507293220544466019873749202124205","180035494851772308931660471789775864906","54918095208492885565683505166259264","323440675222887127605002193144059506265","197425539081793473880353612822999482140","182009406033990727837917841424923737313","306768415678999824194547590913782456783","162063236060413061521607040563626402263","175055869286793868945446615392503160043","184872810508006144113944177940889844655","53658108152795775702378392199582868966","108780307070665816779900182594200835940","110453480606677875260323800247920153999","339078095012037207263006241791088881436","107043808684063605748037961836096098641","181309641108461203568208969331813039126","169726560827259375691170664787150824767","290810746065562779764293414120740175027","63775660441018271883467638696957594470","179553491787315787534514932480624938159","237046019050034827685780913299932046399","233638457521406043061767702799515197922","196360127271647810701259769343312598205"],"threshold":0.9}},{"digest":{"function_hash":"225832940120708688843624914128714406833","length":1051},"id":"CVE-2026-55858-434329ae","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/BaseContext.java","function":"BaseContext"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"125394110267100948280344882787043056509","length":258},"id":"CVE-2026-55858-49c2c95c","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/df4ebe2c61293b7a79ab9dd440199544305d1f38","target":{"file":"src/test/java/org/mariadb/jdbc/integration/tools/TcpProxy.java","function":"restart"}},{"deprecated":false,"digest":{"function_hash":"45776714546164338723462641041249279583","length":172},"id":"CVE-2026-55858-4ba2ebab","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/df4ebe2c61293b7a79ab9dd440199544305d1f38","target":{"file":"src/test/java/org/mariadb/jdbc/integration/tools/TcpProxySocket.java","function":"TcpProxySocket"}},{"digest":{"length":442,"function_hash":"40943019189613979208585310474153148760"},"id":"CVE-2026-55858-56771872","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/client/impl/StandardClient.java","function":"initializeContext"},"deprecated":false},{"id":"CVE-2026-55858-57b1c6bd","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/df4ebe2c61293b7a79ab9dd440199544305d1f38","target":{"file":"src/test/java/org/mariadb/jdbc/integration/tools/TcpProxySocket.java","function":"run"},"deprecated":false,"digest":{"function_hash":"286206149843698329108931548984761100893","length":1831}},{"deprecated":false,"digest":{"line_hashes":["36080727073426881173041813986674935507","313765164227671911998211239114637621924","182427900561183839641512897885912926552","18748215377197812477916482314913713494","326836629880561258824752767660421169150","134669326577623107767554211984084230369","106521113647404475609534626428498840999","127093795513238516185077971010441312007","56529725908919675086179800335607480461","37338405024323771495738158621111463575","120265795765920731081143943464714656529","220592647504481798153606571142269190598","135818739705042006595954142288327108510","122011331843447417156879060623967813612","159907601509891109246439304229943076662","33802407644098004969853588235889933940","250209934825706533869256849015261967210","10180165611358828545441238481820800450","212834346401854957521920983440552735401","791140364776958749155669315619166076","139064770066582847583756338237549340977","111911877464310049565434876779233978945","321594774609313880527286188448185794172","199502207441525298355629710598096598358","37707325452777045990449543844442780944","281530574884719255925048794541219262424","286459214060737518764782150566586856711","132948461189540838900000221056644710100","249822736470852519968590863971879614269","34326942853535270594812861105059438429","284414272539814029761960672945609741080","222773495349271569708503899218532563339","9729861514101896943044901606940373330","188488146291189372441307733007992556407","132258122523427606744925274623816931681","249822736470852519968590863971879614269","321594774609313880527286188448185794172","237786024258601652862330724871184312555","302345350373462776965677230129492726038","2388199116681132166371303471723905893","116353898746934374757627904351828895778","111911877464310049565434876779233978945","45574379738724547161592875030803414249","272619164285717546928115815887689865980","185231575570899371475720430439458086471","228739972331049026873518575240124533034","286124374380645913018762924814290277228","5203845429875158857575703168261928184","48923195057283199900345112223702956096","21934578017714404142788024947012531393","147034241846726266933111612934612146907","297695124607537869317260265828860813512","12013061300143887006331338978698591760","247054472446657027384684085108215205497","292973987720881257323270487289048555562","183812576523699701542514276040346460544","144519087708191447236047301243032049722","213531157934429060409992108638704260695","162145923579123227095337208288085577738","71559441021564197927130027159971801636","212995715004167534551138280515283139977","311783417700207935874770711517786420866","268324232295078176290106445261216930810","305139594093281744640475330745980177575","318551564965847475033085482470490650938","220337420951614415587463431259826714069","192696909586776576116988866569652161854","291800434925973361418919438811576385253","223546901574062350602808886092972198541","176816040358192686828080842518218685502","54285854685218769414178712479157439816","226626565849905700575738508471822099535","291001845362477000441739434302895351304","77262302017947235427470320575908061611","140060465784639053568948441989331006507","93467794650317567682927009028293101724","32560000235401852851504518680724448742","224485162770408943948617931171821113331","12154321257645284595299422001740643185","99956369956854937565959288873537634129","2388199116681132166371303471723905893","239710116751037206416449654653440454352","210585912936909598087414701931544481935","186608888182779395674068129750299962427","161334761599599806820713599479122818247","249822736470852519968590863971879614269","275967535780645398801255054852287645826","1757928844923681562295595033958700022","52692077411421678799880544013545094020","84867976818828499679110854996311744330","120475662925348192104350581947768017674","281001011996375552978131961693417349372"],"threshold":0.9},"id":"CVE-2026-55858-5b54e526","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/df4ebe2c61293b7a79ab9dd440199544305d1f38","target":{"file":"src/test/java/org/mariadb/jdbc/integration/tools/TcpProxySocket.java"}},{"deprecated":false,"digest":{"line_hashes":["330550219919582150847202946066574629889","49697750658017950516123781073215665311","233065206275651680763041588602964773104","235572212977301021960702745427826067558"],"threshold":0.9},"id":"CVE-2026-55858-5d584bce","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"file":"src/main/java/org/mariadb/jdbc/message/server/OkPacket.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/message/server/OkPacket.java","function":"parse"},"deprecated":false,"digest":{"function_hash":"155962033901102341356862186698679364669","length":2911},"id":"CVE-2026-55858-5f3bf15d"},{"id":"CVE-2026-55858-6367be94","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69","target":{"file":"src/main/java/org/mariadb/jdbc/internal/protocol/AbstractConnectProtocol.java"},"deprecated":false,"digest":{"line_hashes":["151009824047607948475678059222330637270","307985445955454455325095678522388932171","53722508435457401404068432023724215606","35333231414147018508320174054629714898"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"289970532453041542688790833220504902617","length":283},"id":"CVE-2026-55858-6af75013","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/df4ebe2c61293b7a79ab9dd440199544305d1f38","target":{"file":"src/test/java/org/mariadb/jdbc/integration/tools/TcpProxySocket.java","function":"sendRst"}},{"id":"CVE-2026-55858-71423d1f","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/message/server/OkPacket.java","function":"OkPacket"},"deprecated":false,"digest":{"length":1528,"function_hash":"18555074866041898480847428085735889168"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/RedoContext.java","function":"RedoContext"},"deprecated":false,"digest":{"function_hash":"153821425392961297237707944943377157894","length":222},"id":"CVE-2026-55858-72bfaee1"},{"source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/message/server/OkPacket.java","function":"parseWithInfo"},"deprecated":false,"digest":{"length":2937,"function_hash":"233612101998429573312123797195383386438"},"id":"CVE-2026-55858-74391e32","signature_type":"Function","signature_version":"v1"},{"target":{"file":"src/test/java/org/mariadb/jdbc/integration/tools/TcpProxy.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["283982539249216696084008895452993606702","47346380725116475200665603837850942091","212103373299154857707036805153242529199","37020035592985614936281328248017706843"]},"id":"CVE-2026-55858-7a7fff17","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/df4ebe2c61293b7a79ab9dd440199544305d1f38"},{"signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/BaseContext.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["334749190331780033212824858170051211572","213105427489662498670608367764744133232","324062505708558153347113309429239843129","223650775047104126827641172554413782079","108780307070665816779900182594200835940","110453480606677875260323800247920153999","421391505656672675225664198878644298","141350383051669145033259742390785244682","219423902876241086392420834749295171156","59551398165532170552669343066291871655","290810746065562779764293414120740175027","63775660441018271883467638696957594470","179553491787315787534514932480624938159","17762951208585819824972592046007162506"]},"id":"CVE-2026-55858-8d917c72","signature_type":"Line"},{"target":{"file":"src/main/java/org/mariadb/jdbc/message/server/OkPacket.java","function":"parse"},"deprecated":false,"digest":{"function_hash":"199012836978399432878188652416115070514","length":2264},"id":"CVE-2026-55858-929e25bc","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69","target":{"file":"src/main/java/org/mariadb/jdbc/internal/protocol/AbstractQueryProtocol.java"},"deprecated":false,"digest":{"line_hashes":["52666586985849206998439485132195107836","165305320807660876169120778187567323388","80848751259490653103714066975646547340","309315546125510662711745112796889003303","88694256818368613201681576459252594163","21048901608323185779535857680143896841","229048601783283177630533440416637014083","245681237539017102021040037709410282398","210225874847266429318334249766310128599","186640110656119525564062996205195921976","208341420966742467441693108145548181833"],"threshold":0.9},"id":"CVE-2026-55858-95f499f5"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/RedoContext.java"},"deprecated":false,"digest":{"line_hashes":["421391505656672675225664198878644298","313543321507051877004795267011674752382","73580464730436916612087533538960482463","191280674298438312427720029914384041126","39113553787858527291886234376555851768"],"threshold":0.9},"id":"CVE-2026-55858-9a358ed8"},{"signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/client/Context.java"},"deprecated":false,"digest":{"line_hashes":["169083957468981638302754390285543980127","232761878524709843340563133323245481991","262020730538650889470913988487017122045","33159305171354859900949693092562750988","41188541018613643547839446001153702834"],"threshold":0.9},"id":"CVE-2026-55858-9f876fb6","signature_type":"Line"},{"source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/df4ebe2c61293b7a79ab9dd440199544305d1f38","target":{"file":"src/test/java/org/mariadb/jdbc/integration/tools/TcpProxySocket.java","function":"kill"},"deprecated":false,"digest":{"function_hash":"63537419803687200015418309072518510864","length":368},"id":"CVE-2026-55858-a25b5823","signature_type":"Function","signature_version":"v1"},{"digest":{"line_hashes":["222344965027504541417155557957555006033","312704544435917022033193099340384466450","64734174960195961341406726557725774179","248626839697171400957506252773893661750","178045925957427625685075231666868939228","194469793943073632694757336998824694608","187799030178534720179313642558992838705","330964698194769253710145480943402579623","171712917476108356331936980871265180336","114710008377443104632763563956101769551","226796667454977904876591370146147556383"],"threshold":0.9},"id":"CVE-2026-55858-a6c8d346","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/client/impl/StandardClient.java"},"deprecated":false},{"digest":{"line_hashes":["108126810956377373627929326655088460816","234646842551842129453913986579893056659","176075496832642647718510931185429763365","217960775189434387483118335278006291673","217524743193090627370686202641201205608","69523070838793646219008658215386502787","48744749762328844931125276328863976867","317055784719653928900124769566977535911","298979695649793026627902059554757367780","240241613757957158500482921626762098958","82406944180098221705568554266306887925","169039161866852585350259899370992777404","161264294039334878944526427520248628820","309204416129595178819663103213171355088","33858582540409798098603920958013547402"],"threshold":0.9},"id":"CVE-2026-55858-b7b4c3c6","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"file":"src/main/java/org/mariadb/jdbc/client/impl/StandardClient.java"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["281940507293220544466019873749202124205","180035494851772308931660471789775864906","324062505708558153347113309429239843129","223650775047104126827641172554413782079","108780307070665816779900182594200835940","110453480606677875260323800247920153999","421391505656672675225664198878644298","141350383051669145033259742390785244682","219423902876241086392420834749295171156","59551398165532170552669343066291871655","290810746065562779764293414120740175027","63775660441018271883467638696957594470","179553491787315787534514932480624938159","237046019050034827685780913299932046399","233638457521406043061767702799515197922","196360127271647810701259769343312598205","280023506313103744798822273721365742736","94240660085226365616557647253892224909","137673876530999576575747076560572000335","233909107536780668541169255815538368324"],"threshold":0.9},"id":"CVE-2026-55858-d01d8319","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/BaseContext.java"}},{"deprecated":false,"digest":{"line_hashes":["199021618760035977967793932323401153300","312227921002386958946238872860897469843","198337213864286375431576498868427092642","203926544764735042098148271864321235884"],"threshold":0.9},"id":"CVE-2026-55858-d6654a4c","signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/message/server/OkPacket.java"}},{"signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/client/context/RedoContext.java","function":"RedoContext"},"deprecated":false,"digest":{"function_hash":"153821425392961297237707944943377157894","length":222},"id":"CVE-2026-55858-da6a3de0","signature_type":"Function"},{"digest":{"function_hash":"251386158626548685760787255898292529010","length":962},"id":"CVE-2026-55858-def6e525","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/300716bef1e1d0370a41be7863b88aa2d55fbb69","target":{"file":"src/main/java/org/mariadb/jdbc/internal/protocol/AbstractQueryProtocol.java","function":"handleStateChange"},"deprecated":false},{"digest":{"function_hash":"236885817011925237231265836114594854944","length":3135},"id":"CVE-2026-55858-e4f84fdb","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/8cfd9df697372ad4ed09fe87a34b34babb6d43d6","target":{"file":"src/main/java/org/mariadb/jdbc/client/impl/StandardClient.java","function":"StandardClient"},"deprecated":false},{"source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/7b3c69221b5463ee03472654040b3f6b9e5329c7","target":{"file":"src/main/java/org/mariadb/jdbc/message/server/OkPacket.java"},"deprecated":false,"digest":{"line_hashes":["92839760418278016293698884821419422959","252231480617030491710318376776403555060","227394155773671020068056670614559053956","32856494875053111756837846779771386770","169634177192652302958491320989876598956","235572212977301021960702745427826067558","251786711995661194129340940902563974986","229633209715545795756357335348795818469","134471039931298420985116845845775616688","70804310111928626894538296863001040403"],"threshold":0.9},"id":"CVE-2026-55858-f29f7ea9","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"139817208084594801246809516014239318084","length":2991},"id":"CVE-2026-55858-f790d54f","signature_type":"Function","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"function":"StandardClient","file":"src/main/java/org/mariadb/jdbc/client/impl/StandardClient.java"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/defeee068496e3f6312e775c7de864f1b06388d4","target":{"file":"src/test/java/org/mariadb/jdbc/BaseTest.java"},"deprecated":false,"digest":{"line_hashes":["256785738987381743653376132555694639944","68727910757537263648139751933403397105","299737602962380196508329329106861516084","199629589759793507609483143677577197047","95283212317998327544029625605673081170","322788262573727276319129692285418808751","194029478353950828363197234374977169676","197056354458389135263618634574852168053","13356345791544287112055878874098875073","167882527907366622863897518138363941560","53515382639599372886795338142543809582","151664467116144830529837379748782198517","102274171772077041731510278249774198069","41804052608904477648882984701865935262","199313348767260020767884016327716041457","117513760966066909694289784647327715328","56816739296230036131343654835708668775"],"threshold":0.9},"id":"CVE-2026-55858-fd386a8c"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/mariadb-corporation/mariadb-connector-j/commit/c555c9b477521be0c35c3a5461f9f46681553607","target":{"file":"src/main/java/org/mariadb/jdbc/client/Context.java"},"deprecated":false,"digest":{"line_hashes":["261513365327218192682771388275551009941","169083957468981638302754390285543980127","232761878524709843340563133323245481991","262020730538650889470913988487017122045","33159305171354859900949693092562750988"],"threshold":0.9},"id":"CVE-2026-55858-ffea8302"}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}