Databases 8 min read

Is MySQL Dying? Why MariaDB and PostgreSQL Offer Safer, Faster Alternatives

The article analyzes MySQL's dwindling open‑source credibility, mounting security vulnerabilities, performance regressions, and Oracle's commercial lock‑in, contrasting it with MariaDB's transparent development and the growing migration of applications to MariaDB or PostgreSQL for better security and performance.

Java Backend Technology
Java Backend Technology
Java Backend Technology
Is MySQL Dying? Why MariaDB and PostgreSQL Offer Safer, Faster Alternatives

MySQL open‑source status

MySQL is licensed under GPL v2, but since Oracle acquired Sun in 2009 the development process no longer follows open‑source principles. Core development is performed behind closed doors, community contributions are rarely accepted, and the public bug tracker is not the system actually used.

All core development occurs internally.

The official GitHub repository https://github.com/mysql/mysql-server showed a sharp decline in commit activity in 2025.

External pull requests are mostly ignored; when merged the original author is often omitted from the commit history.

The publicly advertised bug tracker does not reflect the real issue‑tracking workflow, limiting community feedback.

GitHub commit trend graph
GitHub commit trend graph

Technical stagnation and performance regression

Version 8.0.29 enabled in‑place ALTER TABLE by default, causing data corruption and crashes; only version 8.0.32 partially remedied the issue.

Oracle labels the 8.0 series as “evergreen” yet introduces breaking changes in minor releases, contrary to the expectation of bug‑only updates.

No major feature release has been delivered for six years: 8.0 was released in 2018, 8.1 remained a preview in 2023, and the 2024 LTS 8.4 was criticized for lacking new functionality.

Performance has regressed: benchmark tests by MySQL expert Mark Callaghan show MySQL 9.5 delivering roughly 15 % lower throughput than 8.0 under write‑intensive workloads.

DB‑Engines ranking curve
DB‑Engines ranking curve

Security vulnerabilities

In 2025 MySQL reported 123 CVE entries, while MariaDB reported only eight. The CVE descriptions for MySQL are often vague, lacking technical details, remediation code, or verification steps, forcing users to rely on Oracle statements.

Example: CVE‑2025‑53067 merely states that a high‑privilege attacker can exploit the vulnerability to compromise MySQL Server, without providing details or patches.

Migration considerations

Switching to MariaDB is generally seamless for most applications; the code base remains compatible with MySQL client protocols.

Domestic databases such as OceanBase and PolarDB also support MySQL‑compatible migration.

Global statistics indicate that 57 % of WordPress sites run on MariaDB, surpassing MySQL’s 42 % share. Projects like Wikipedia, Debian and Fedora have already migrated.

For workloads requiring advanced features (JSON, GIS, sophisticated transaction control), PostgreSQL is a strong alternative; TiDB offers distributed capabilities.

For the majority of small‑to‑medium workloads, MariaDB provides the best balance of compatibility, performance, and genuine open‑source governance.

Conclusion

Oracle’s strategy of feature reduction, closed‑source development, and service bundling creates a commercial lock‑in that undermines MySQL’s technical viability. The declining commit activity, stagnant feature roadmap, performance regressions, and the surge in security vulnerabilities collectively suggest that MySQL is no longer a sustainable choice for new projects.

MigrationMySQLOpen Sourcedatabase securityMariaDB
Java Backend Technology
Written by

Java Backend Technology

Focus on Java-related technologies: SSM, Spring ecosystem, microservices, MySQL, MyCat, clustering, distributed systems, middleware, Linux, networking, multithreading. Occasionally cover DevOps tools like Jenkins, Nexus, Docker, and ELK. Also share technical insights from time to time, committed to Java full-stack development!

0 followers
Reader feedback

How this landed with the community

Sign in to like

Rate this article

Was this worth your time?

Sign in to rate
Discussion

0 Comments

Thoughtful readers leave field notes, pushback, and hard-won operational detail here.