AZL-57324 CVE-2025-22868 affecting package vitess for versions less than 19.0.4-5

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

CVE-2024-45339 affecting package vitess for versions less than 17.0.7-4

CVE-2024-45339 affecting package vitess for versions less than 17.0.7-4. A patched version of the package is available...

CBL Mariner 2.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

Azure Linux 3.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

CVE-2024-45339 affecting package vitess for versions less than 19.0.4-4

CVE-2024-45339 affecting package vitess for versions less than 19.0.4-4. A patched version of the package is available...

CVE-2024-32886 affecting package vitess for versions less than 19.0.4-1

CVE-2024-32886 affecting package vitess for versions less than 19.0.4-1. A patched version of the package is available...

CVE-2024-32886 affecting package vitess for versions less than 17.0.7-1

CVE-2024-32886 affecting package vitess for versions less than 17.0.7-1. A patched version of the package is available...

AZL-56066 CVE-2024-45339 affecting package vitess for versions less than 19.0.4-4

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

AZL-56075 CVE-2024-45339 affecting package vitess for versions less than 17.0.7-4

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

GHSA-VG6X-RCGG-RJX6 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, vitess...

GHSA-VG6X-RCGG-RJX6 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2025-24010 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, vitess...

CVE-2025-24010 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2024-45338 affecting package vitess for versions less than 17.0.7-3

CVE-2024-45338 affecting package vitess for versions less than 17.0.7-3. A patched version of the package is available...

SUSE CVE-2024-53257

Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...

AZL-54507 CVE-2024-45338 affecting package vitess for versions less than 17.0.7-3

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

GO-2024-3306 Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess

Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess...

GHSA-MWCW-C2X4-8C55 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, jitsucom-jitsu...

GHSA-MWCW-C2X4-8C55 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-katib, kibana, vitess...

CVE-2024-55565 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, jitsucom-jitsu...