StackRadar

CVE-2026-55856

Medium

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
158
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
1 of 1
affected package

MariaDB has cleartext password disclosure to a MITM on the initial-handshake

Carried by container images the latest versions of 158 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
mariadb-java-clientmaven1.7.4, 2.2.5, 2.3.0, 2.5.1+24 more2.7.14, 3.3.5, 3.4.3, 3.5.975
OSV records
GHSA-g9jj-cgmh-9f38

Charts affected

158 by stars
ChartLatestAffected imagesRadar Score
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

2,097
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
mariadb-java-client@3.3.4
3.3.5

Open the chart page →

2,264
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
mariadb-java-client@3.3.3
3.3.5
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
mariadb-java-client@3.4.0
3.4.3

Open the chart page →

21,211
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

2,590
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloakself-hosters-by-nightVerified publisher0.1.11 of 1See more

keycloak self-hosters-by-night 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.60aae0de7fca8
mariadb-java-client@3.5.7
3.5.9

Open the chart page →

518
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
mariadb-java-client@3.5.3
3.5.9

Open the chart page →

1,690
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

6,443
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
mariadb-java-client@3.0.5
3.3.5

Open the chart page →

13,767
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

5,063
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
mariadb-java-client@2.7.0
2.7.14

Open the chart page →

18,756
languagetool-serverszpadel-chartsVerified publisher0.4.01 of 1See more

languagetool-server szpadel-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
mariadb-java-client@2.7.6
2.7.14

Open the chart page →

808
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
mariadb-java-client@2.5.1
2.7.14

Open the chart page →

4,538
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
openunison-operatortremolo3.0.301 of 1See more

openunison-operator tremolo 3.0.30

1 of the 1 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
mariadb-java-client@3.5.8
3.5.9

Open the chart page →

2,126
orchestratremolo3.1.552 of 5See more

orchestra tremolo 3.1.55

2 of the 5 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
mariadb-java-client@3.5.8
3.5.9
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
mariadb-java-client@3.5.8
3.5.9

Open the chart page →

7,637
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-55856.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

45,239

Container images carrying it

75 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
trinodb/trino:45038c6f24ab1a4
mariadb-java-client@3.3.3
3.3.5
1
trinodb/trino:4815b5e0a97f599
mariadb-java-client@3.5.8
3.5.9
1
trinodb/trino:4796af989b0846d
mariadb-java-client@3.3.4
3.3.5
1
trinodb/trino:405ee80ab5eeab2
mariadb-java-client@3.0.5
3.3.5
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
mariadb-java-client@3.5.7
3.5.9
1
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
mariadb-java-client@2.6.0
2.7.14
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
mariadb-java-client@2.6.0
2.7.14
1
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
mariadb-java-client@3.5.8
3.5.9
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
mariadb-java-client@3.4.0
3.4.3
1
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
mariadb-java-client@2.7.6
2.7.14
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
mariadb-java-client@3.5.6
3.5.9
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
mariadb-java-client@3.5.6
3.5.9
1
quay.io/keycloak/keycloak:26.009a381c715ab
mariadb-java-client@3.4.1
3.4.3
1
quay.io/keycloak/keycloak:26.60aae0de7fca8
mariadb-java-client@3.5.7
3.5.9
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
mariadb-java-client@2.5.4
2.7.14
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
mariadb-java-client@3.4.1
3.4.3
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
mariadb-java-client@3.3.3
3.3.5
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
mariadb-java-client@3.1.4
3.3.5
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
mariadb-java-client@3.5.3
3.5.9
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
mariadb-java-client@3.0.8
3.3.5
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
mariadb-java-client@3.5.6
3.5.9
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
mariadb-java-client@3.5.6
3.5.9
1
quay.io/keycloak/keycloak:26.6.39b0330756022
mariadb-java-client@3.5.7
3.5.9
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
mariadb-java-client@3.4.1
3.4.3
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
mariadb-java-client@3.0.8
3.3.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.