Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
vitess.io/vitess
Go
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Vitess vttablet /twopcz reflected XSS
CVE-2026-104252 · GHSA-V75V-6FPF-GVW8
Version ranges need review.
vitess.io/vitess
Go
Critical
Fix reported
2026-11-06
Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
CVE-2026-65959 · GHSA-MHC4-G3WH-CW7M
Version ranges need review.
vitess.io/vitess
Go
Medium
Fix reported
2026-09-15
Vitess vulnerable to infinite memory consumption and vtgate crash
CVE-2024-32886 · GHSA-649X-HXFX-57J2
Version ranges need review.
github.com/vitessio/vitess
vitess.io/vitess
Go
Medium
Fix reported
2026-09-10
vitess allows users to create keyspaces that can deny access to already existing keyspaces
CVE-2023-29194 · GHSA-735R-HV67-G38F
Version ranges need review.
vitess.io/vitess
Go
Medium
Fix reported
2026-09-10
VTAdmin users that can create shards can deny access to other functions
CVE-2023-29195 · GHSA-PQJ7-JX24-WJ7W
vitess.io/vitess
Go
Medium
Fix reported
2026-09-10
Vitess allows HTML injection in /debug/querylogz & /debug/env
CVE-2024-53257 · GHSA-7MWH-Q3XM-QH6P
Version ranges need review.
vitess.io/vitess
Go
Medium
Fix reported
2026-08-07
Vitess users with backup storage access can write to arbitrary file paths on restore
CVE-2026-27969 · GHSA-R492-HJGH-C9GW
Version ranges need review.
vitess.io/vitess
Go
Critical
Fix reported
2026-03-23
Vitess users with backup storage access can gain unauthorized access to production deployment environments
CVE-2026-27965 · GHSA-8G8J-R87H-P36X
Version ranges need review.
vitess.io/vitess
Go
High
Fix reported
2026-03-23
