StackRadar

CVE-2026-55856

Medium

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
158
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
1 of 1
affected package

MariaDB has cleartext password disclosure to a MITM on the initial-handshake

Carried by container images the latest versions of 158 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
mariadb-java-clientmaven1.7.4, 2.2.5, 2.3.0, 2.5.1+24 more2.7.14, 3.3.5, 3.4.3, 3.5.975
OSV records
GHSA-g9jj-cgmh-9f38

Charts affected

158 by stars
ChartLatestAffected imagesRadar Score
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

6,915
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
mariadb-java-client@1.7.4
2.7.14

Open the chart page →

19,802
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.6.39b0330756022
mariadb-java-client@3.5.7
3.5.9

Open the chart page →

4,586
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
mariadb-java-client@2.7.2
2.7.14

Open the chart page →

9,334
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

7,792
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
mariadb-java-client@2.7.3
2.7.14

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

19,215
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
mariadb-java-client@2.2.5
2.7.14

Open the chart page →

27,949
sharrygeek-cookbookVerified publisher5.4.21 of 1See more

sharry geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
eikek0/sharry:1.8.0661ff3ef42cd
mariadb-java-client@2.7.3
2.7.14

Open the chart page →

1,419
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
mariadb-java-client@2.7.6
2.7.14

Open the chart page →

2,572
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

37,671
openrefineinseefrlab3.5.01 of 1See more

openrefine inseefrlab 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
easypi/openrefine:3.7.0d2950a36a576
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

1,754
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

45,239
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
mariadb-java-client@3.3.3
3.3.5

Open the chart page →

7,802
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
mariadb-java-client@2.7.10
2.7.14

Open the chart page →

2,589
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
mariadb-java-client@3.5.6
3.5.9

Open the chart page →

2,901
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
mariadb-java-client@3.3.3
3.3.5

Open the chart page →

15,369
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mariadb-java-client@2.7.2
2.7.14

Open the chart page →

3,582
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

2,587
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
mariadb-java-client@2.3.0
2.7.14

Open the chart page →

6,037
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

7,792
trinoopstty0.2.121 of 1See more

trino opstty 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
mariadb-java-client@3.5.8
3.5.9

Open the chart page →

1,158
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190

Container images carrying it

75 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
trinodb/trino:45038c6f24ab1a4
mariadb-java-client@3.3.3
3.3.5
1
trinodb/trino:4815b5e0a97f599
mariadb-java-client@3.5.8
3.5.9
1
trinodb/trino:4796af989b0846d
mariadb-java-client@3.3.4
3.3.5
1
trinodb/trino:405ee80ab5eeab2
mariadb-java-client@3.0.5
3.3.5
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
mariadb-java-client@3.5.7
3.5.9
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
mariadb-java-client@2.6.0
2.7.14
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
mariadb-java-client@2.6.0
2.7.14
1
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
mariadb-java-client@3.5.8
3.5.9
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
mariadb-java-client@3.4.0
3.4.3
1
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
mariadb-java-client@2.7.6
2.7.14
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
mariadb-java-client@3.5.6
3.5.9
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
mariadb-java-client@3.5.6
3.5.9
1
quay.io/keycloak/keycloak:26.009a381c715ab
mariadb-java-client@3.4.1
3.4.3
1
quay.io/keycloak/keycloak:26.60aae0de7fca8
mariadb-java-client@3.5.7
3.5.9
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
mariadb-java-client@2.5.4
2.7.14
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
mariadb-java-client@3.4.1
3.4.3
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
mariadb-java-client@3.3.3
3.3.5
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
mariadb-java-client@3.1.4
3.3.5
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
mariadb-java-client@3.5.3
3.5.9
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
mariadb-java-client@3.0.8
3.3.5
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
mariadb-java-client@3.5.6
3.5.9
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
mariadb-java-client@3.5.6
3.5.9
1
quay.io/keycloak/keycloak:26.6.39b0330756022
mariadb-java-client@3.5.7
3.5.9
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
mariadb-java-client@3.4.1
3.4.3
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
mariadb-java-client@3.0.8
3.3.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.