mariadb-10.6

Direct Vulnerabilities

Known vulnerabilities in the mariadb-10.6 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L External Control of System or Configuration Setting	*
L Out-of-bounds Write	*
L Improper Validation of Specified Index, Position, or Offset in Input	*
L Out-of-bounds Read	*
L Improper Encoding or Escaping of Output	*
L Out-of-bounds Read	*
L Use of Incorrectly-Resolved Name or Reference	*
L Incorrect Permission Assignment for Critical Resource	*
L Improper Access Control	<10.6.21-r1
L Inappropriate Encoding for Output Context	<10.6.21-r1
L Insufficiently Protected Credentials	<10.6.21-r1
L Cleartext Transmission of Sensitive Information	<10.6.21-r1
L OS Command Injection	<10.6.26-r0
M Incorrect Authorization	<10.6.26-r0
H Directory Traversal	<10.6.26-r0
C OS Command Injection	<10.6.26-r0
H OS Command Injection	<10.6.27-r0
H OS Command Injection	<10.6.27-r0
L Uncontrolled Memory Allocation	*
C OS Command Injection	<10.6.27-r0
L CVE-2026-3494	<10.6.25-r0
M CVE-2025-21490	<10.6.21-r0
M CVE-2025-30693	<10.6.22-r0
L CVE-2023-52969	<10.6.22-r0
H SQL Injection	<10.6.21-r1
L CVE-2023-52970	<10.6.22-r0
M CVE-2025-30722	<10.6.22-r0
C Improper Initialization	<10.6.21-r1
C SQL Injection	<10.6.21-r1