Connector/Node.js 3.2.5 Release Notes

Connector/Node.js 3.2.5 is a Stable (GA) release of MariaDB Connector/Node.js, released on 2026-08-07

The most recent release of MariaDB Connector/Node.js is: 3.5.4

Download Connector/Node.js 3.5.4

Download Release Notes Changelog Connector/Node.js Overview

Release date: 7 Aug 2026

MariaDB Connector/Node.js 3.2.5 is a Stable (GA) release.

For an overview of MariaDB Connector/Node.js see the About MariaDB Connector/Node.js page

Notable changes

• CONJS-357 Add JavaScript SAST (CodeQL and eslint-plugin-security) to CI

Bug Fixes

• CONJS-358 Refuse multi-part packet (> 16 MB) reassembly before authentication completes, since a rogue server could otherwise exhaust client memory before any credential is validated

• CONJS-363 typeCast accessors returned corrupted values with prepared statements

• CONJS-367 Uninitialized process memory leaked to the server via a malformed GeoJSON Polygon parameter (report by fg0x0)

• CONJS-368 Fixed SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES (report by fg0x0)

• CONJS-369 Fixed SQL injection through object keys in SET expansion when using permitSetMultiParamEntries (report by fg0x0)

• Escape the server-supplied filename before building the LOAD DATA LOCAL INFILE validation regular expression

_{This page is: Copyright © 2026 MariaDB. All rights reserved.}