For details on MariaDB’s end-to-end security strategy, visit our Trust Center.
Current MariaDB customers may report a security concern by creating a support case in the Customer Support Portal.
For the MariaDB Foundation’s policy on reporting security concerns, please see MariaDB Foundation Reporting Procedures.
MariaDB asks that the report provides full details of the security concern so our security team can validate and reproduce the issue including the following information:
Vulnerability reports need to be documented in a way that they can be reproduced, easily understood and classified. The more details you send, including screen-shots, code, video; helps to understand the flaw as quickly as possible.
To all customer and security researchers who follow this MariaDB Vulnerability Reporting Policy, our security team commits to:
We take security issues seriously and will endeavor to respond swiftly to fix verifiable security issues.
While we appreciate the work done by independent security researchers, we do not offer compensation for reporting a security vulnerability.