vitessio vulnerabilities
8 published CVEs name vitessio among the affected products.
- 8Published CVEs8 of them scored
- 4Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-104252
Vitess vttablet /twopcz reflected XSS
vitessio · vitess
Critical9.8 - CVE-2026-65959
Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
vitessio · vitess
Medium5.3 - CVE-2026-27969
Vitess users with backup storage access can write to arbitrary file paths on restore
vitessio · vitess
Critical9.3 - CVE-2026-27965
Vitess users with backup storage access can gain unauthorized access to production deployment environments
vitessio · vitess
High8.4 - CVE-2024-53257
Vitess allows HTML injection in /debug/querylogz & /debug/env
vitessio · vitess
Medium4.9 - CVE-2024-32886
Vitess vulnerable to infinite memory consumption and vtgate crash
vitessio · vitess
Medium4.9 - CVE-2023-29195
Vitess VTAdmin users that can create shards can deny access to other functions
vitessio · vitess
Medium4.1 - CVE-2023-29194
vitess allows users to create keyspaces that can deny access to already existing keyspaces
vitessio · vitess
Medium4.1