CVE-2026-85748

Critical

Advisory

Published 21 Oct 2026In the index since 22 Oct 2026

MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

Carried by container images the latest versions of 2 of 18,219 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
mysql-clientbitnami	12.3.2-1	12.3.3	2

OSV records: BIT-mysql-client-2026-85748
Also known as: BIT-mariadb-2026-85748, BIT-mariadb-min-2026-85748, GHSA-mv8g-9f7q-hprm

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 2 container images this version deploys carry CVE-2026-85748.

Container image	Digest	Package	Fixed in
cloudtooling/moodle :5.3.0.3	70961e4169fb	mysql-client@12.3.2-1	12.3.3

4,786

wordpresswordpress-ng

1 of the 2 container images this version deploys carry CVE-2026-85748.

Container image	Digest	Package	Fixed in
cloudtooling/wordpress :7.1.3.1	50513f7a183c	mysql-client@12.3.2-1	12.3.3

4,644

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
cloudtooling/moodle :5.3.0.3	70961e4169fb	mysql-client@12.3.2-1	12.3.3	1
cloudtooling/wordpress :7.1.3.1	50513f7a183c	mysql-client@12.3.2-1	12.3.3	1