MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-107382 · Microsoft / collected KEV context

EUVD-2026-95141

GHSA-cx2f-j9fh-8g68

BIT-mariadb-2026-107382

BIT-mariadb-min-2026-107382

BIT-mysql-client-2026-107382

cve-program · CVE-2026-107382

• https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915
• https://hackerone.com/reports/3835450
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4
• https://jira.mariadb.org/browse/CONJS-356

euvd · EUVD-2026-95141

• https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915
• https://hackerone.com/reports/3835450
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4
• https://jira.mariadb.org/browse/CONJS-356

nvd · CVE-2026-107382

• https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68
• https://hackerone.com/reports/3835450
• https://jira.mariadb.org/browse/CONJS-356

osv · GHSA-cx2f-j9fh-8g68

• https://github.com/mariadb-corporation/mariadb-connector-nodejs/security/advisories/GHSA-cx2f-j9fh-8g68
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/commit/784ca3d757194a05f202d84b0c762321e76a7915
• https://github.com/mariadb-corporation/mariadb-connector-nodejs
• https://github.com/mariadb-corporation/mariadb-connector-nodejs/releases/tag/3.5.4
• https://jira.mariadb.org/browse/CONJS-356

No related operational record is retained in the current change model.