CVE-2026-107817Published
MariaDB: mysql_json plugin OOB reads
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-107817 · Microsoft / collected KEV context
cve-program · CVE-2026-107817
- https://github.com/MariaDB/server/security/advisories/GHSA-89ph-64cf-gqcc
- https://github.com/MariaDB/server/commit/851f52470d470a96a66e0b7e5599f3b6c2e45907
- https://github.com/MariaDB/server/releases/tag/mariadb-10.11.19
- https://github.com/MariaDB/server/releases/tag/mariadb-10.6.28
- https://github.com/MariaDB/server/releases/tag/mariadb-11.4.13
- https://github.com/MariaDB/server/releases/tag/mariadb-11.8.9
- https://github.com/MariaDB/server/releases/tag/mariadb-12.3.3
- https://github.com/MariaDB/server/releases/tag/mariadb-13.0.2
- https://jira.mariadb.org/browse/MDEV-40678
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.