Uploaded image for project: 'MariaDB MaxScale'
  1. MariaDB MaxScale
  2. MXS-6686

SBOM vulnerability CVE-2026-42264 (MXS)

    XMLWordPrintable

Details

    • MXS-CAPACITY-26-2

    Description

      CVE-2026-42264 with severity High.
      Package type github:language:javascript, name axios, affected version 1.13.6, fix version 1.15.2.
      Recommended upgrade: -.
      Total number of findings: 26
      Environment: MaxScale
      Investigation
      Elastic (Kibana Discover): https://mariadb-serverless-prod-e6994e.kb.us-central1.gcp.elastic.cloud:443/app/discover#/?_g=%28filters%3A%21%28%29%2CrefreshInterval%3A%28pause%3A%21t%2Cvalue%3A0%29%2Ctime%3A%28from%3Anow-1440m%2Cto%3Anow%29%29&_a=%28columns%3A%21%28%29%2CdataSource%3A%28dataViewId%3Asm-vm-v2-default%2Ctype%3AdataView%29%2Cfilters%3A%21%28%29%2Cinterval%3Aauto%2Cquery%3A%28language%3Akuery%2Cquery%3A%27%28cve_id.keyword%3A%22CVE-2026-42264%22+or+cve_id%3A%22CVE-2026-42264%22%29+and+%28data_source.keyword%3A%22lw%22+or+data_source%3A%22lw%22%29+and+%28affects.base_id.keyword%3A%22MaxScale%22+or+affects.base_id%3A%22MaxScale%22%29%27%29%2Csort%3A%21%28%21%28%27%40timestamp%27%2Cdesc%29%29%29
      Grafana: https://vm.sec.mariadb.net/d/be0u2pm2acjk0a/findings-over-time?from=now-1440m&to=now&var-BasicId=MaxScale&var-CveId=CVE-2026-42264&var-ExtraId=25.01.7&var-FindingType=ctr&var-Type=application
      Lacework: https://mariadb.lacework.net/ui/vulnerabilities/vuln/CVE-2026-42264

      For general information on vulnerability management please refer to the Wiki page.

      Type Software Package Version package_name Report Date
      application MaxScale 25.01.7 maxscale-25.01.7-1.debian.bookworm.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.debian.bullseye.aarch64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.debian.bullseye.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.debian.trixie.aarch64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.debian.trixie.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.rhel.8.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.rhel.9.ppc64le 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.rhel.9.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.sles.15.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.ubuntu.jammy.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 maxscale-25.01.7-1.ubuntu.noble.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.01.7 unknown 2026-09-15T02:17:13Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.debian.bookworm.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.debian.bullseye.aarch64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.debian.bullseye.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.debian.trixie.aarch64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.debian.trixie.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.rhel.10.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.rhel.8.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.rhel.9.ppc64le 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.rhel.9.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.sles.15.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.ubuntu.jammy.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.ubuntu.noble.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 maxscale-25.10.3-2.ubuntu.resolute.x86_64 2026-07-09T07:34:07Z
      application MaxScale 25.10.3 unknown 2026-09-15T02:17:13Z

      Attachments

        Activity

          People

            thien.ly Thien Ly
            service-account-security MariaDB Security Service
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Git Integration

                Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.