Explore

Rule Explorer

Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.

Public rules
4797
Downloads
6.6M
Verified
4797
Authors
2
Search the rule indexUse CVE, GHSA, CWE, language, framework, package, or rule slug.
1 rules matched. Showing 1 loaded rules.
Publish rule
CVE-2026-55857: Mariadb Cleartext Auth Plugin Missing Require Securecve-2026-55857-mariadb-cleartext-auth-plugin-missing-require-secure

Authentication plugin for cleartext credentials ('dialog' or 'mysql_clear_password') does not enforce a secure connection requirement via requireSecure() or requireSsl() returning true, allowing sensitive credentials to be sent over unencrypted transports.

by Provallyupdated 2026-09-02Apache-2.0
1090 direct109 via packs
downloads
76quality
All matching rules loaded.