CVE-2021-46666: MariaDB

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

MariaDB before 10.6.2 allows an application crash because of mishandling of a pushdown from a HAVING clause to a WHERE clause.

Affected products

• MariaDB MariaDB: before 10.2.39 (fixed in 10.2.39); from 10.3.0, before 10.3.30 (fixed in 10.3.30); from 10.4.0, before 10.4.20 (fixed in 10.4.20); from 10.5.0, before 10.5.11 (fixed in 10.5.11); from 10.6.0, before 10.6.2 (fixed in 10.6.2)

Published 2022-02-01. Last modified 2026-06-17.