products / mariadb

MariaDB

MariaDB is a community-developed fork of MySQL, maintained by the MariaDB Foundation and vendors. NVD tracks it as mariadb:mariadb with semver-style server versions.

api usage

Querying MariaDB

product slugmariadb

version format10.6.5, 11.4.2

bash

curl "https://api.attestd.io/v1/check?product=mariadb&version=10.6.5" \
  -H "Authorization: Bearer $ATTESTD_KEY"

Spot-check CVE-2022-47015 (DoS, CVSS 6.5). Paste your live JSON from /v1/check after ingestion.

json

{
  "product": "mariadb",
  "version": "10.6.5",
  "supported": true,
  "risk_state": "high",
  "risk_factors": ["remote_exploitable", "patch_available"],
  "actively_exploited": false,
  "remote_exploitable": true,
  "authentication_required": false,
  "patch_available": true,
  "fixed_version": "10.6.12",
  "confidence": 0.85,
  "cve_ids": ["CVE-2022-47015"],
  "last_updated": "2026-04-03T00:00:00Z"
}

cleaner line

Newer release

bash

curl "https://api.attestd.io/v1/check?product=mariadb&version=11.8.2" \
  -H "Authorization: Bearer $ATTESTD_KEY"

notable cves

CVE history

CVE	Description	Affects	CVSS
`CVE-2022-47015`	Denial of service via crafted query / optimizer interaction.	10.x (see NVD)	6.5
`CVE-2021-46661`	Server component flaw allowing denial of service.	10.2–10.6	4.9
`CVE-2021-46659`	Privilege context issue in MariaDB server.	10.5, 10.6	5.5
`CVE-2020-13294`	Information disclosure via error handling paths.	10.4, 10.5	4.3
`CVE-2019-2503`	Authentication / protocol handling weakness.	10.3, 10.4	7.5

All products MySQL PostgreSQL