StackRadar

CVE-2026-55858

Medium

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
158
of 17,781 indexed, latest versions
Container images
75
deployed by those charts
Fix available
1 of 1
affected package

org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

Carried by container images the latest versions of 158 of 17,781 indexed charts deploy, on 75 images.

Affected packageAffected versionsFixed inImages
mariadb-java-clientmaven1.7.4, 2.2.5, 2.3.0, 2.5.1+24 more2.7.14, 3.3.5, 3.4.3, 3.5.975
OSV records
GHSA-xvr9-35cr-46v9

Charts affected

158 by stars
ChartLatestAffected imagesRadar Score
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

2,097
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
mariadb-java-client@3.3.4
3.3.5

Open the chart page →

2,264
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
mariadb-java-client@3.3.3
3.3.5
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
mariadb-java-client@3.4.0
3.4.3

Open the chart page →

21,211
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

2,590
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloakself-hosters-by-nightVerified publisher0.1.11 of 1See more

keycloak self-hosters-by-night 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.60aae0de7fca8
mariadb-java-client@3.5.7
3.5.9

Open the chart page →

518
pagesshrutiujlan-pages1.0.01 of 3See more

pages shrutiujlan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
mariadb-java-client@3.5.3
3.5.9

Open the chart page →

1,690
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

6,443
pagessrinipages1.0.01 of 3See more

pages srinipages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
mariadb-java-client@3.0.5
3.3.5

Open the chart page →

13,767
pagesstephendillondell1.0.01 of 3See more

pages stephendillondell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

5,063
pagessunilb2590-pages1.0.01 of 3See more

pages sunilb2590-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
mariadb-java-client@2.7.0
2.7.14

Open the chart page →

18,756
languagetool-serverszpadel-chartsVerified publisher0.4.01 of 1See more

languagetool-server szpadel-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
mariadb-java-client@2.7.6
2.7.14

Open the chart page →

808
zipkin-gcpt3n1.0.01 of 1See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
mariadb-java-client@2.5.1
2.7.14

Open the chart page →

4,538
pagestest43221.0.01 of 3See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesthiru-pages1.0.01 of 3See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
pagesthuy-pages1.0.01 of 3See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,190
openunison-operatortremolo3.0.301 of 1See more

openunison-operator tremolo 3.0.30

1 of the 1 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
mariadb-java-client@3.5.8
3.5.9

Open the chart page →

2,126
orchestratremolo3.1.552 of 5See more

orchestra tremolo 3.1.55

2 of the 5 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.509ad450220ab9
mariadb-java-client@3.5.8
3.5.9
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
mariadb-java-client@3.5.8
3.5.9

Open the chart page →

7,637
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-55858.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

45,239

Container images carrying it

75 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14
79
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
mariadb-java-client@3.5.6
3.5.9
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
mariadb-java-client@3.5.6
3.5.9
2
metabase/metabase:v0.45.21fb334ce4820
mariadb-java-client@2.7.6
2.7.14
2
metabase/metabase:v0.61.1.x9491ed11c901
mariadb-java-client@2.7.10
2.7.14
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
mariadb-java-client@3.5.8
3.5.9
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
mariadb-java-client@2.5.4
2.7.14
2
1dev/server:11.9.0cd5b12fe5471
mariadb-java-client@2.3.0
2.7.14
1
airbyte/server:2.2.070e125498a1c
mariadb-java-client@3.5.6
3.5.9
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
mariadb-java-client@2.7.3
2.7.14
1
assistiot/identity-manager_kc:latest0df4b4fa899a
mariadb-java-client@2.5.4
2.7.14
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
mariadb-java-client@3.0.8
3.3.5
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
mariadb-java-client@3.3.3
3.3.5
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
mariadb-java-client@3.5.3
3.5.9
1
bluerange/bluerange:26.1.307c8f73b55df
mariadb-java-client@3.4.2
3.4.3
1
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
mariadb-java-client@2.7.10
2.7.14
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
mariadb-java-client@3.5.1
3.5.9
1
dremio/dremio-oss:24.1.080ed2e3b7c43
mariadb-java-client@3.0.8
3.3.5
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
mariadb-java-client@3.5.6
3.5.9
1
easypi/openrefine:3.7.0d2950a36a576
mariadb-java-client@3.0.8
3.3.5
1
eginnovations/agent:7.5.4e4dfe242fe9f
mariadb-java-client@3.5.7
3.5.9
1
eikek0/sharry:1.8.0661ff3ef42cd
mariadb-java-client@2.7.3
2.7.14
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
mariadb-java-client@3.4.1
3.4.3
1
featurehub/mr:1.9.1477d8bf771a9
mariadb-java-client@2.7.10
2.7.14
1
flyway/flyway:9.1545b5d7cdc75a
mariadb-java-client@2.7.2
2.7.14
1
flyway/flyway:9.14.1-alpine80f12c80502b
mariadb-java-client@2.7.2
2.7.14
1
keyfactor/signserver-ce:7.3.2798fbbe00283
mariadb-java-client@3.5.3
3.5.9
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
mariadb-java-client@3.3.3
3.3.5
1
library/convertigo:8.4.3ae605bfcda05
mariadb-java-client@3.5.8
3.5.9
1
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
mariadb-java-client@3.3.2
3.3.5
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mariadb-java-client@2.7.2
2.7.14
1
metabase/metabase:v0.63.1.124f150effd484
mariadb-java-client@2.7.10
2.7.14
1
metabase/metabase:v0.53.4.17807bc5cad17
mariadb-java-client@2.7.10
2.7.14
1
metabase/metabase:v0.46.09ebdc664a6b2
mariadb-java-client@2.7.6
2.7.14
1
openkm/openkm-ce:6.3.113bc465a7461b
mariadb-java-client@2.2.5
2.7.14
1
openzipkin/zipkin:2.24197a9692f6a9
mariadb-java-client@2.7.11
2.7.14
1
openzipkin/zipkin:2.21.060c3970df479
mariadb-java-client@2.6.0
2.7.14
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
mariadb-java-client@2.5.1
2.7.14
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
mariadb-java-client@2.7.10
2.7.14
1
rrobetti/ojp:0.1.0-beta1141bd88232b
mariadb-java-client@3.5.2
3.5.9
1
rundeck/rundeck:3.2.74d64fe56f767
mariadb-java-client@1.7.4
2.7.14
1
rundeck/rundeck:3.0.16b13e8059ad72
mariadb-java-client@1.7.4
2.7.14
1
siakhooi/query:1.0.0f1f4b5b1b870
mariadb-java-client@3.5.8
3.5.9
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
mariadb-java-client@2.7.0
2.7.14
1
traccar/traccar:6.7-alpine621c8d6d46fd
mariadb-java-client@3.5.3
3.5.9
1
treskon/portrait:DEV-latest88e813f22347
mariadb-java-client@3.1.2
3.3.5
1
trinodb/trino:4801565e8cac299
mariadb-java-client@3.3.4
3.3.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.