How many CVEs have patched log_statement_ex?

2 published CVEs changed log_statement_ex in mariadb/server, in 2 distinct patches totalling 120 changed lines, between 2022 and 2026.

What is the latest CVE that changed log_statement_ex?

CVE-2026-3494 (MariaDB Server Audit Plugin Comment Handling Bypass), published 2026-03-03, changed lines 1664 to 1759 of plugin/server_audit/server_audit.c.

How does log_statement_ex compare to the rest of mariadb/server?

mariadb/server has 23 CVEs with a located fix in total; 2 of them changed log_statement_ex.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

mariadb/server

Function

log_statement_ex

Name: log_statement_ex in mariadb/server: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

plugin/server_audit/server_audit.c

Last patched March 3, 2026

2

CVEs

That changed this function

2

Distinct patches

Backports counted once

120

Lines changed

Added plus removed

2022–2026

Years

By CVE publication date

Overview

log_statement_ex in mariadb/server was changed by 2 published CVE fixes between 2022 and 2026, in 2 distinct patches that added or removed 120 lines in total.

mariadb/server has 23 CVEs with a located fix in total, so 9% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed log_statement_ex, newest first, with the lines each fix touched.

MariaDB Server Audit Plugin Comment Handling Bypass
CVE-2026-3494 · lines 1664–1759 · +24 −54 in 8 hunks
Medium · CVSS 5.3
EPSS 0.4%2026-03-03
CVE-2022-31624
CVE-2022-31624 · lines 1697–1837 · +14 −28 in 8 hunks
Medium · CVSS 5.5
EPSS 0.2%2022-05-25

Get an alert when the next CVE fix lands in mariadb/server, with the patched functions.

Monitor server CVEs

Other functions in these files

Functions in the same file that CVE fixes also changed.

Other hotspots in the repository

Functions in mariadb/server changed by the most CVE fixes.

Validate3 CVEs · extra/yassl/src/cert_wrapper.cpp X509_NAME_get_index_by_NID3 CVEs · extra/yassl/src/ssl.cpp CopyX5093 CVEs · extra/yassl/src/yassl_int.cpp GetEntry3 CVEs · extra/yassl/src/yassl_int.cpp GetLength3 CVEs · extra/yassl/src/yassl_int.cpp set_resuming3 CVEs · extra/yassl/src/yassl_int.cpp

All patched functions in mariadb/server

Frequently asked questions

Common questions about CVE fixes to log_statement_ex.

How many CVEs have patched log_statement_ex?: 2 published CVEs changed log_statement_ex in mariadb/server, in 2 distinct patches totalling 120 changed lines, between 2022 and 2026.
What is the latest CVE that changed log_statement_ex?: CVE-2026-3494 (MariaDB Server Audit Plugin Comment Handling Bypass), published 2026-03-03, changed lines 1664 to 1759 of plugin/server_audit/server_audit.c.
How does log_statement_ex compare to the rest of mariadb/server?: mariadb/server has 23 CVEs with a located fix in total; 2 of them changed log_statement_ex.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track mariadb/server CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing