CVE-2024-24786 affecting package vitess for versions less than 19.0.4-2

CVE-2024-24786 affecting package vitess for versions less than 19.0.4-2. An upgraded version of the package is available that resolves this issue...

CVE-2023-45288 affecting package vitess for versions less than 19.0.4-2

CVE-2023-45288 affecting package vitess for versions less than 19.0.4-2. An upgraded version of the package is available that resolves this issue...

AZL-35674 CVE-2024-24786 affecting package vitess for versions less than 19.0.4-2

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35348 CVE-2023-3978 affecting package vitess for versions less than 19.0.4-2

Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should be escaped to not be. This could lead to an XSS attack...