StackRadar

CVE-2026-55857

Medium

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
158
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
1 of 1
affected package

org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials

Carried by container images the latest versions of 158 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
mariadb-java-clientmaven1.7.4, 2.2.5, 2.3.0, 2.5.1+24 more2.7.14, 3.3.5, 3.4.3, 3.5.975
OSV records
GHSA-qxvw-fvwx-5cp7

Charts affected

158 by stars
ChartLatestAffected imagesRadar Score
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

6,915
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
mariadb-java-client@1.7.4
2.7.14

Open the chart page →

19,802
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.6.39b0330756022
mariadb-java-client@3.5.7
3.5.9

Open the chart page →

4,586
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
mariadb-java-client@2.7.2
2.7.14

Open the chart page →

9,334
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

7,792
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
mariadb-java-client@2.7.3
2.7.14

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

19,215
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
mariadb-java-client@2.2.5
2.7.14

Open the chart page →

27,949
sharrygeek-cookbookVerified publisher5.4.21 of 1See more

sharry geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
eikek0/sharry:1.8.0661ff3ef42cd
mariadb-java-client@2.7.3
2.7.14

Open the chart page →

1,419
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
mariadb-java-client@2.7.6
2.7.14

Open the chart page →

2,572
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

37,671
openrefineinseefrlab3.5.01 of 1See more

openrefine inseefrlab 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
easypi/openrefine:3.7.0d2950a36a576
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

1,754
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

45,239
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
mariadb-java-client@3.3.3
3.3.5

Open the chart page →

7,802
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
mariadb-java-client@2.7.10
2.7.14

Open the chart page →

2,589
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
mariadb-java-client@3.5.6
3.5.9

Open the chart page →

2,901
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
mariadb-java-client@3.3.3
3.3.5

Open the chart page →

15,369
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mariadb-java-client@2.7.2
2.7.14

Open the chart page →

3,582
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

2,587
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
mariadb-java-client@2.3.0
2.7.14

Open the chart page →

6,037
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

7,792
trinoopstty0.2.121 of 1See more

trino opstty 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
mariadb-java-client@3.5.8
3.5.9

Open the chart page →

1,158
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55857.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190

Container images carrying it

75 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14
79
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
mariadb-java-client@3.5.6
3.5.9
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
mariadb-java-client@3.5.6
3.5.9
2
metabase/metabase:v0.45.21fb334ce4820
mariadb-java-client@2.7.6
2.7.14
2
metabase/metabase:v0.61.1.x9491ed11c901
mariadb-java-client@2.7.10
2.7.14
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
mariadb-java-client@3.5.8
3.5.9
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
mariadb-java-client@2.5.4
2.7.14
2
1dev/server:11.9.0cd5b12fe5471
mariadb-java-client@2.3.0
2.7.14
1
airbyte/server:2.2.070e125498a1c
mariadb-java-client@3.5.6
3.5.9
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
mariadb-java-client@2.7.3
2.7.14
1
assistiot/identity-manager_kc:latest0df4b4fa899a
mariadb-java-client@2.5.4
2.7.14
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
mariadb-java-client@3.0.8
3.3.5
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
mariadb-java-client@3.3.3
3.3.5
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
mariadb-java-client@3.5.3
3.5.9
1
bluerange/bluerange:26.1.307c8f73b55df
mariadb-java-client@3.4.2
3.4.3
1
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
mariadb-java-client@2.7.10
2.7.14
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
mariadb-java-client@3.5.1
3.5.9
1
dremio/dremio-oss:24.1.080ed2e3b7c43
mariadb-java-client@3.0.8
3.3.5
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
mariadb-java-client@3.5.6
3.5.9
1
easypi/openrefine:3.7.0d2950a36a576
mariadb-java-client@3.0.8
3.3.5
1
eginnovations/agent:7.5.4e4dfe242fe9f
mariadb-java-client@3.5.7
3.5.9
1
eikek0/sharry:1.8.0661ff3ef42cd
mariadb-java-client@2.7.3
2.7.14
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
mariadb-java-client@3.4.1
3.4.3
1
featurehub/mr:1.9.1477d8bf771a9
mariadb-java-client@2.7.10
2.7.14
1
flyway/flyway:9.1545b5d7cdc75a
mariadb-java-client@2.7.2
2.7.14
1
flyway/flyway:9.14.1-alpine80f12c80502b
mariadb-java-client@2.7.2
2.7.14
1
keyfactor/signserver-ce:7.3.2798fbbe00283
mariadb-java-client@3.5.3
3.5.9
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
mariadb-java-client@3.3.3
3.3.5
1
library/convertigo:8.4.3ae605bfcda05
mariadb-java-client@3.5.8
3.5.9
1
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
mariadb-java-client@3.3.2
3.3.5
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mariadb-java-client@2.7.2
2.7.14
1
metabase/metabase:v0.63.1.124f150effd484
mariadb-java-client@2.7.10
2.7.14
1
metabase/metabase:v0.53.4.17807bc5cad17
mariadb-java-client@2.7.10
2.7.14
1
metabase/metabase:v0.46.09ebdc664a6b2
mariadb-java-client@2.7.6
2.7.14
1
openkm/openkm-ce:6.3.113bc465a7461b
mariadb-java-client@2.2.5
2.7.14
1
openzipkin/zipkin:2.24197a9692f6a9
mariadb-java-client@2.7.11
2.7.14
1
openzipkin/zipkin:2.21.060c3970df479
mariadb-java-client@2.6.0
2.7.14
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
mariadb-java-client@2.5.1
2.7.14
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
mariadb-java-client@2.7.10
2.7.14
1
rrobetti/ojp:0.1.0-beta1141bd88232b
mariadb-java-client@3.5.2
3.5.9
1
rundeck/rundeck:3.2.74d64fe56f767
mariadb-java-client@1.7.4
2.7.14
1
rundeck/rundeck:3.0.16b13e8059ad72
mariadb-java-client@1.7.4
2.7.14
1
siakhooi/query:1.0.0f1f4b5b1b870
mariadb-java-client@3.5.8
3.5.9
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
mariadb-java-client@2.7.0
2.7.14
1
traccar/traccar:6.7-alpine621c8d6d46fd
mariadb-java-client@3.5.3
3.5.9
1
treskon/portrait:DEV-latest88e813f22347
mariadb-java-client@3.1.2
3.3.5
1
trinodb/trino:4801565e8cac299
mariadb-java-client@3.3.4
3.3.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.