{"id":"EUVD-2026-95141","enisaUuid":"d0b4a01f-712e-3f98-94d7-65294df0eb3e","description":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-validation path calls Ed25519PasswordAuth.hash() through Authentication.validateFingerPrint, but Ed25519PasswordAuth.hash() references a seed identifier that is not in scope. Exposure requires a MariaDB server reached over TCP, TLS enabled with ssl: true or an ssl object whose rejectUnauthorized value is not false, a password set, no ssl.ca configured, and client_ed25519 negotiated as the authentication plugin. Under those conditions, a legitimate server, malicious server, or network attacker presenting a self-signed certificate can reach this path and cause a synchronous ReferenceError to escape the socket data handler. Under Node.js default uncaught-exception behavior, the client process terminates, causing denial of service. Configurations using a provided CA, rejectUnauthorized: false, another authentication plugin, or a Unix socket do not reach this vulnerable path. This issue is fixed in version 3.5.4.","datePublished":"Oct 8, 2026, 6:24:10 PM","dateUpdated":"Oct 8, 2026, 6:42:37 PM","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68\nhttps://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915\nhttps://hackerone.com/reports/3835450\nhttps://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4\nhttps://jira.mariadb.org/browse/CONJS-356\n","aliases":"CVE-2026-107382\nGHSA-cx2f-j9fh-8g68\n","assigner":"GitHub_M","epss":0.24,"enisaIdProduct":[{"id":"1946a493-5e38-3127-bc69-6f92c8fc9f20","product":{"name":"mariadb-connector-nodejs","vendor":{"name":"mariadb-corporation"}},"product_version":"3.3.0, \u003c 3.5.4"}],"enisaIdVendor":[{"id":"0e1eb0ce-e1e1-30f9-89f7-0c5000023987","vendor":{"name":"mariadb-corporation"}}],"enisaIdVulnerability":[{"id":"9ac5793d-41bc-314b-adc6-0fe6b7c0521e","vulnerability":{"id":"CVE-2026-107382","description":"MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-validation path calls Ed25519PasswordAuth.hash() through Authentication.validateFingerPrint, but Ed25519PasswordAuth.hash() references a seed identifier that is not in scope. Exposure requires a MariaDB server reached over TCP, TLS enabled with ssl: true or an ssl object whose rejectUnauthorized value is not false, a password set, no ssl.ca configured, and client_ed25519 negotiated as the authentication plugin. Under those conditions, a legitimate server, malicious server, or network attacker presenting a self-signed certificate can reach this path and cause a synchronous ReferenceError to escape the socket data handler. Under Node.js default uncaught-exception behavior, the client process terminates, causing denial of service. Configurations using a provided CA, rejectUnauthorized: false, another authentication plugin, or a Unix socket do not reach this vulnerable path. This issue is fixed in version 3.5.4.","datePublished":"Oct 8, 2026, 6:24:10 PM","dateUpdated":"Oct 8, 2026, 6:42:37 PM","status":"PUBLISHED","baseScore":5.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68\nhttps://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915\nhttps://hackerone.com/reports/3835450\nhttps://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4\nhttps://jira.mariadb.org/browse/CONJS-356\n","enisa_id":"EUVD-2026-95141\n","assigner":"GitHub_M","epss":0.24,"dataProcessed":"Nov 2, 2026, 7:17:24 AM","vulnerabilityProduct":[{"id":"130e9a1f-8634-3dd8-a8b1-e7ba45b5a5c8","product":{"name":"mariadb-connector-nodejs","vendor":{"name":"mariadb-corporation"}},"product_version":"3.3.0, \u003c 3.5.4"}],"vulnerabilityVendor":[{"id":"b762d323-b744-3208-b4fc-d823b1895db7","vendor":{"name":"mariadb-corporation"}}]}},{"id":"ca4257ad-d6f1-3b9a-9f13-04ea8e9747f9","vulnerability":{"id":"GHSA-cx2f-j9fh-8g68","description":"MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS","datePublished":"Oct 8, 2026, 7:42:04 PM","dateUpdated":"Oct 8, 2026, 7:42:04 PM","baseScore":0.0,"references":"https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68\nhttps://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915\nhttps://github.com/mariadb-corporation/mariadb-connector-nodejs\nhttps://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4\nhttps://jira.mariadb.org/browse/CONJS-356\n","enisa_id":"EUVD-2026-95141\n","aliases":"GHSA-cx2f-j9fh-8g68\nCVE-2026-107382\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:07:07 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}