AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

vitess security advisories

8 advisories · 3 critical or high in 12 months · latest Oct 15

Repository

8 advisories

Critical 9.8Oct 15Vitess vttablet /twopcz reflected XSSCVE-2026-104252fixed in 0.23.5 +1Medium 5.3Aug 18Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL dataCVE-2026-65959no fix yetCriticalFeb 27Vitess users with backup storage access can write to arbitrary file paths on restoreCVE-2026-27969fixed in 0.22.4 +1HighFeb 26Vitess users with backup storage access can gain unauthorized access to production deployment environmentsCVE-2026-27965no fix yetMedium 4.9Dec 3, 2024Vitess allows HTML injection in /debug/querylogz & /debug/envCVE-2024-53257fixed in 0.19.8 +2Medium 4.9May 8, 2024Vitess vulnerable to infinite memory consumption and vtgate crashCVE-2024-32886fixed in 0.17.7 +5Medium 4.1May 11, 2023VTAdmin users that can create shards can deny access to other functionsCVE-2023-29195fixed in 0.16.2Medium 4.1Apr 11, 2023vitess allows users to create keyspaces that can deny access to already existing keyspacesCVE-2023-29194fixed in 0.16.1
About vitess

Vitess is a database clustering system for horizontal scaling of MySQL.

Packages watched: vitess.io/vitess (Go), github.com/vitessio/vitess (Go).

vitessio/vitessOn Repos