SUSE-SU-2026:23855-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-6348 CVE-2026-84304 GHSA-vp52-pcj8-j9qc GO-2026-6356...

SUSE-SU-2026:23863-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Changes for govulncheck-vulndb: - Update to version 0.0.20260916T180043 2026-09-16T18:00:43Z jscPED-11136. Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-6348 CVE-2026-84304 GHSA-vp52-pcj8-j9qc GO-2026-6356...

CVE-2026-65959 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-65959 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-65959

In Vitess 24.0.2 and earlier, the /debug/vrlog endpoint in vrlog.go calls vrlogStatsHandler() without acl.CheckAccessHTTP(r, acl.DEBUGGING), unlike comparable debug endpoints. A remote attacker reaching the vttablet debug HTTP port can stream live VReplication SQL statements and bound application...