EUVD-2026-61106

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-65959 Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-73646 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, vitess, jitsucom-jitsu...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: vitess, datadog-agent, datadog-agent-fips, coder-fips, kubernetes-dns-node-cache-fips, buildkite-agent-fips, kubernetes-dns-node-cache, traefik, coder, buildkite-agent, eks-distro-fips, eks-distro, traefik-fips...

GO-2026-6000 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, vitess, datadog-agent...

CVE-2026-43871 affecting package vitess for versions less than 19.0.4-12

CVE-2026-43871 affecting package vitess for versions less than 19.0.4-12. A patched version of the package is available...

CVE-2026-55969 affecting package vitess for versions less than 19.0.4-12

CVE-2026-55969 affecting package vitess for versions less than 19.0.4-12. A patched version of the package is available...

GHSA-QWWW-VCR4-C8H2 vulnerabilities

Vulnerabilities for packages: vitess, librechat...

GHSA-QWWW-VCR4-C8H2 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-53667 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-CHX6-HX7R-MCP5 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-WRJC-X8RR-H8H6 vulnerabilities

Vulnerabilities for packages: keycloak, vitess...

CVE-2026-53666 vulnerabilities

Vulnerabilities for packages: keycloak, vitess...

CVE-2026-55685 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-H8FP-F39C-Q6MH vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-53669 vulnerabilities

Vulnerabilities for packages: keycloak, vitess...

GHSA-337J-9HXR-RHXG vulnerabilities

Vulnerabilities for packages: keycloak, vitess...

CVE-2026-55685 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-CHX6-HX7R-MCP5 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-53669 vulnerabilities

Vulnerabilities for packages: vitess, librechat, keycloak...