Vulnerability history

NPM: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

NPM: MariaDB Connector/Node.js: SQL injection through object keys in SET expansion (permitSetMultiParamEntries)

NPM: MariaDB Connector/Node.js exposes uninitialized process memory through malformed GeoJSON parameters

NPM: MariaDB Connector/Node.js: Uncaught exception crashes the client during ed25519 authentication with zero-configuration TLS

NPM: MariaDB has possible SQL injection in Buffer parameter escaping under big5/gbk/sjis/cp932/gb18030 client charsets

NPM: MariaDB has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

NPM: MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

NPM: Withdrawn Advisory: mariadb was malware