Connector/Node.js 3.4.7 Changelog

Connector/Node.js 3.4.7 is a Stable (GA) release of MariaDB Connector/Node.js, released on 2026-08-07

Download Release Notes Changelog Connector/Node.js Overview

Release date: 7 Aug 2026

For the highlights of this release, see the release notes.

The revision number links will take you to the revision's page on GitHub. On GitHub you can view more details of the revision and view diffs of the code modified in that revision.

• Revision #67c931b - bump 3.4.7 version

• Revision #144b8f4 - [CONJS-369] Object keys interpolated as identifiers without escapeId in SET expansion

• Revision #7670d90 - [CONJS-368] SQL injection in text protocol when session uses NO_BACKSLASH_ESCAPES

• Revision #2314c03 - [CONJS-367] Uninitialized process memory leaked to server via malformed GeoJSON Polygon parameter

• Revision #253b6f2 - [CONJS-363] typeCast accessors return corrupted values with prepared statements

• Revision #8e8be66 - [CONJS-358] Refuse multi-part packet reassembly before authentication

• Revision #58f7589 - [misc] test correction

• Revision #081c0ad - [misc] correct CodeQL false positive

• Revision #c1b0e76 - [CONJS-357] use codeql v4

• Revision #e9734d7 - [misc] test correction for restrictedAuth

• Revision #74e3f7e - [CONJS-357] Harden connection-string parsing on maintenance

• Revision #6e57b95 - [CONJS-357] Add JavaScript SAST: CodeQL workflow + eslint-plugin-security with CI lint gate

• Revision #91c821b - [misc] Escape server-supplied filename before building LOCAL INFILE validation regex

_{This page is: Copyright © 2026 MariaDB. All rights reserved.}