Connector/Node.js 3.5.3 Changelog

Connector/Node.js 3.5.3 is a Stable (GA) release of MariaDB Connector/Node.js, released on 2026-06-09

Download Release Notes Changelog Connector/Node.js Overview

Release date: 9 Jun 2026

For the highlights of this release, see the release notes.

The revision number links will take you to the revision's page on GitHub. On GitHub you can view more details of the revision and view diffs of the code modified in that revision.

• Revision #14e0f16 - [misc] Update CHANGELOG.md to include recent security fixes for PAM authentication and LOAD DATA LOCAL INFILE

• Revision #f34b785 - [misc] test stability: poll debug log until flushed instead of fixed wait

• Revision #2df7c26 - [CONJS-354] Reject server-initiated LOAD DATA LOCAL INFILE when permitLocalInfile is disabled

• Revision #7d6e44a - [misc] Cap the length of server-sent numeric strings before BigInt parsing, preventing a malicious server from causing CPU exhaustion via an oversized BIGINT value

• Revision #53b3042 - [CONJS-353] PAM (dialog) authentication now requires a secure connection (TLS or a local unix socket), since it transmits the password in clear text

• Revision #41eec7f - [CONJS-351] Implement constant-time comparison in validateFingerPrint to prevent MitM attacks

• Revision #aa50c50 - Update CHANGELOG.md for version 3.4.6, 3.3.3 and 3.2.4, adding fixed issues and improvements

• Revision #6c10db5 - [misc] test stability correction

• Revision #5d5293a - [misc] Refuse mysql_clear_password over an insecure connection

• Revision #c602a76 - [misc] Rename auth plugin predicate permitHash() to isMitmProof()

• Revision #514576a - [CONJS-349] Fix cleartext password disclosure to MitM when using fingerprint validation

• Revision #a8561b0 - Merge branch 'main' into develop

• Revision #bce4509 - [misc] update 3.5.3 CHANGELOG

• Revision #0148cad - [misc] Fix possible SQL injection in Buffer parameter escape under big5/gbk/sjis/cp932/gb18030 client charset

• Revision #780960e - [misc] update 3.5.3 CHANGELOG

• Revision #7af8b7b - [misc] Fix possible SQL injection in Buffer parameter escape under big5/gbk/sjis/cp932/gb18030 client charset

• Revision #f69e8de - [misc] expose extended column metadata in FieldInfo and add result-shape helper types

• Revision #62dae90 - [misc] add RowsWithMeta and WithMeta helper types for query result metadata

• Revision #4cf4dae - [misc] adding node 26 CI test

• Revision #8085bbf - [misc] test stability improvement

• Revision #0efa826 - [misc] test stability improvement

• Revision #2e13c9e - Merge branch 'develop'

• Revision #dbd0bb2 - bump 3.5.3 version

• Revision #d9c283c - [misc] test stability correction

• Revision #e0bcce4 - [misc] TypeScript configuration to use bundler module resolution and esnext module

• Revision #548f2b0 - [misc] using tinybench for benchmarking, dropping unsupported benchmark and updating results with recent version

• Revision #f792a0e - [misc] Update Node.js version requirements and dependencies in package.json

• Revision #8f29e9c - Add smoke tests for CommonJS and ESM imports

• Revision #e3feb24 - Add smoke tests for CommonJS and ESM imports

• Revision #f91e9a3 - [CONJS-343] Add support for CSJ and ESM

• Revision #985ad55 - [CONJS-343] Add support for CSJ and ESM

• Revision #b060647 - [misc] correction for maxscale CI testing

• Revision #b626091 - [misc] Fix cluster test assertion messages and increase timeout values for reliability

• Revision #fdedd5f - [misc] correction for maxscale CI testing

• Revision #058f1f8 - [misc] Fix cluster test assertion messages and increase timeout values for reliability

• Revision #42ec475 - [misc] Fix SQL comment parsing to handle edge cases with -- and /* */ delimiters

• Revision #cf7b076 - [misc] improve named pipe test reliability with better error handling and skip conditions

• Revision #530f16c - [misc] add maxscale CI testing

• Revision #ff26150 - [misc] correct test suite beforeAll using Skip

_{This page is: Copyright © 2025 MariaDB. All rights reserved.}