A security issue has been identified for MariaDB, a popular open-source database software used by many websites to store content and user data. The flaw only impacts MariaDB server versions 3.3.18 and 3.4.8.
Under specific conditions, a standard security tool designed to block harmful database commands (known as SQL injection attacks) fails to work as intended in these affected versions. This occurs when a site uses the big5 character set, sends data to the database via text protocol, and relies on the mysql_real_escape_string() tool to filter out malicious user input. Successful SQL injection attacks can let unauthorized users access, change, or delete the data stored on your website.
The MariaDB development team has released patched versions 3.3.19 and 3.4.9 that resolve this vulnerability.
Source: NVD (National Vulnerability Database) — https://nvd.nist.gov/vuln/detail/CVE-2026-44172