StackRadar

CVE-2026-61700

Low

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
157
of 17,803 indexed, latest versions
Container images
74
deployed by those charts
Fix available
1 of 1
affected package

MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests

Carried by container images the latest versions of 157 of 17,803 indexed charts deploy, on 74 images.

Affected packageAffected versionsFixed inImages
mariadb-java-clientmaven1.7.4, 2.2.5, 2.3.0, 2.5.1+24 more2.7.14, 3.3.5, 3.4.3, 3.5.974
OSV records
GHSA-wxmm-q36w-r9xj

Charts affected

157 by stars
ChartLatestAffected imagesRadar Score
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

56,284
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

6,920
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
mariadb-java-client@1.7.4
2.7.14

Open the chart page →

19,905
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.6.39b0330756022
mariadb-java-client@3.5.7
3.5.9

Open the chart page →

4,647
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
mariadb-java-client@2.7.2
2.7.14

Open the chart page →

68,313
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

7,889
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
mariadb-java-client@2.7.3
2.7.14

Open the chart page →

18,138
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

19,277
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
mariadb-java-client@2.2.5
2.7.14

Open the chart page →

28,100
sharrygeek-cookbookVerified publisher5.4.21 of 1See more

sharry geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
eikek0/sharry:1.8.0661ff3ef42cd
mariadb-java-client@2.7.3
2.7.14

Open the chart page →

1,422
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
mariadb-java-client@2.7.6
2.7.14

Open the chart page →

2,563
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

108,761
openrefineinseefrlab3.5.01 of 1See more

openrefine inseefrlab 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
easypi/openrefine:3.7.0d2950a36a576
mariadb-java-client@3.0.8
3.3.5

Open the chart page →

1,746
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3

Open the chart page →

45,468
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
mariadb-java-client@3.3.3
3.3.5

Open the chart page →

7,852
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
mariadb-java-client@2.7.10
2.7.14

Open the chart page →

2,725
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
mariadb-java-client@3.5.6
3.5.9

Open the chart page →

2,965
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagesnarain1.0.01 of 3See more

pages narain 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagesnarasimha-pages1.0.01 of 3See more

pages narasimha-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagesnavin-brixton1.0.01 of 3See more

pages navin-brixton 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
mariadb-java-client@3.3.3
3.3.5

Open the chart page →

15,518
ma1sdnetsocVerified publisher0.2.11 of 1See more

ma1sd netsoc 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mariadb-java-client@2.7.2
2.7.14

Open the chart page →

3,587
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

2,652
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
mariadb-java-client@2.3.0
2.7.14

Open the chart page →

6,148
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9

Open the chart page →

7,889
trinoopstty0.2.141 of 1See more

trino opstty 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
trinodb/trino:4815b5e0a97f599
mariadb-java-client@3.5.8
3.5.9

Open the chart page →

1,162
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-61700.

Container imageDigestPackageFixed in
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14

Open the chart page →

20,261

Container images carrying it

74 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
flyway/flyway:6.4.422d97ceb0c47
mariadb-java-client@2.6.0
2.7.14
79
apache/fineract:1.12.1a83cf1980609
mariadb-java-client@3.5.2
3.5.9
2
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
mariadb-java-client@3.5.6
3.5.9
2
graviteeio/apim-management-api:4.12.19-debian27374522cd04
mariadb-java-client@3.5.6
3.5.9
2
metabase/metabase:v0.45.21fb334ce4820
mariadb-java-client@2.7.6
2.7.14
2
metabase/metabase:v0.61.1.x9491ed11c901
mariadb-java-client@2.7.10
2.7.14
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
mariadb-java-client@3.4.1
3.4.3
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
mariadb-java-client@3.0.8
3.3.5
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
mariadb-java-client@2.5.4
2.7.14
2
1dev/server:11.9.0cd5b12fe5471
mariadb-java-client@2.3.0
2.7.14
1
airbyte/server:2.3.039141ed8ce5e
mariadb-java-client@3.5.6
3.5.9
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
mariadb-java-client@2.7.3
2.7.14
1
assistiot/identity-manager_kc:latest0df4b4fa899a
mariadb-java-client@2.5.4
2.7.14
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
mariadb-java-client@3.0.8
3.3.5
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
mariadb-java-client@3.3.3
3.3.5
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
mariadb-java-client@3.5.3
3.5.9
1
bluerange/bluerange:26.1.307c8f73b55df
mariadb-java-client@3.4.2
3.4.3
1
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
mariadb-java-client@2.7.10
2.7.14
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
mariadb-java-client@3.5.1
3.5.9
1
dremio/dremio-oss:24.1.080ed2e3b7c43
mariadb-java-client@3.0.8
3.3.5
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
mariadb-java-client@3.5.6
3.5.9
1
easypi/openrefine:3.7.0d2950a36a576
mariadb-java-client@3.0.8
3.3.5
1
eginnovations/agent:7.5.4e4dfe242fe9f
mariadb-java-client@3.5.7
3.5.9
1
eikek0/sharry:1.8.0661ff3ef42cd
mariadb-java-client@2.7.3
2.7.14
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
mariadb-java-client@3.4.1
3.4.3
1
featurehub/mr:1.9.1477d8bf771a9
mariadb-java-client@2.7.10
2.7.14
1
flyway/flyway:9.1545b5d7cdc75a
mariadb-java-client@2.7.2
2.7.14
1
flyway/flyway:9.14.1-alpine80f12c80502b
mariadb-java-client@2.7.2
2.7.14
1
keyfactor/ejbca-ce:9.6.3ef574ed81c1e
mariadb-java-client@3.5.7
3.5.9
1
keyfactor/signserver-ce:7.7.1f8d64caeaea9
mariadb-java-client@3.5.7
3.5.9
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
mariadb-java-client@3.3.3
3.3.5
1
library/convertigo:8.4.3ae605bfcda05
mariadb-java-client@3.5.8
3.5.9
1
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
mariadb-java-client@3.3.2
3.3.5
1
ma1uta/ma1sd:2.5.0ee2a56d8b8ca
mariadb-java-client@2.7.2
2.7.14
1
metabase/metabase:v0.63.1.124f150effd484
mariadb-java-client@2.7.10
2.7.14
1
metabase/metabase:v0.53.4.17807bc5cad17
mariadb-java-client@2.7.10
2.7.14
1
metabase/metabase:v0.46.09ebdc664a6b2
mariadb-java-client@2.7.6
2.7.14
1
openkm/openkm-ce:6.3.113bc465a7461b
mariadb-java-client@2.2.5
2.7.14
1
openzipkin/zipkin:2.24197a9692f6a9
mariadb-java-client@2.7.11
2.7.14
1
openzipkin/zipkin:2.21.060c3970df479
mariadb-java-client@2.6.0
2.7.14
1
openzipkin/zipkin-gcp:0.15.2b5d51d1144e2
mariadb-java-client@2.5.1
2.7.14
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
mariadb-java-client@2.7.10
2.7.14
1
rrobetti/ojp:0.1.0-beta1141bd88232b
mariadb-java-client@3.5.2
3.5.9
1
rundeck/rundeck:3.2.74d64fe56f767
mariadb-java-client@1.7.4
2.7.14
1
rundeck/rundeck:3.0.16b13e8059ad72
mariadb-java-client@1.7.4
2.7.14
1
siakhooi/query:1.0.0f1f4b5b1b870
mariadb-java-client@3.5.8
3.5.9
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
mariadb-java-client@2.7.0
2.7.14
1
traccar/traccar:6.7-alpine621c8d6d46fd
mariadb-java-client@3.5.3
3.5.9
1
treskon/portrait:DEV-latest88e813f22347
mariadb-java-client@3.1.2
3.3.5
1
trinodb/trino:4801565e8cac299
mariadb-java-client@3.3.4
3.3.5
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.