CVE-2026-39363 vulnerabilities

Vulnerabilities for packages: langfuse, vite, vitess...

SUSE CVE-2026-27965

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location e.g. an S3 bucket can manipulate backup manifest files so that arbitrary code is later executed when that backup is restored...

SUSE CVE-2026-27969

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location e.g. an S3 bucket can manipulate backup manifest files so that files in the manifest - which may be files that they have also...

GHSA-XPQW-6GX7-V673 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-29074 vulnerabilities

Vulnerabilities for packages: vitess...

CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15

CVE-2026-27965 affecting package vitess for versions less than 17.0.7-15. A patched version of the package is available...

CVE-2026-27969 affecting package vitess for versions less than 17.0.7-15

CVE-2026-27969 affecting package vitess for versions less than 17.0.7-15. A patched version of the package is available...

CVE-2025-11065 affecting package vitess for versions less than 19.0.4-9

CVE-2025-11065 affecting package vitess for versions less than 19.0.4-9. A patched version of the package is available...

GO-2026-4570 Vitess users with backup storage access can write to arbitrary file paths in vitess.io/vitess

Vitess users with backup storage access can write to arbitrary file paths on restore in vitess.io/vitess...

GO-2026-4567 Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess

Vitess users with backup storage access can gain unauthorized access to production deployment environments in vitess.io/vitess...

CVE-2025-47911 affecting package vitess for versions less than 17.0.7-14

CVE-2025-47911 affecting package vitess for versions less than 17.0.7-14. A patched version of the package is available...

CVE-2025-11065 affecting package vitess for versions less than 17.0.7-14

CVE-2025-11065 affecting package vitess for versions less than 17.0.7-14. A patched version of the package is available...

CVE-2025-58190 affecting package vitess for versions less than 17.0.7-14

CVE-2025-58190 affecting package vitess for versions less than 17.0.7-14. A patched version of the package is available...

CVE-2026-27965 affecting package vitess for versions less than 19.0.4-8

CVE-2026-27965 affecting package vitess for versions less than 19.0.4-8. A patched version of the package is available...

CVE-2026-27969 affecting package vitess for versions less than 19.0.4-8

CVE-2026-27969 affecting package vitess for versions less than 19.0.4-8. A patched version of the package is available...

GHSA-R492-HJGH-C9GW Vitess users with backup storage access can write to arbitrary file paths on restore

Impact Anyone with read/write access to the backup storage location e.g. an S3 bucket can manipulate backup manifest files so that files in the manifest — which may be files that they have also added to the manifest and backup contents — are written to any accessible location on restore. This is ...

EUVD-2026-8821

Vitess users with backup storage access can write to arbitrary file paths on restore...

Vitess users with backup storage access can write to arbitrary file paths on restore

Impact Anyone with read/write access to the backup storage location e.g. an S3 bucket can manipulate backup manifest files so that files in the manifest — which may be files that they have also added to the manifest and backup contents — are written to any accessible location on restore. This is ...

Vitess users with backup storage access can write to arbitrary file paths on restore

...

Vitess users with backup storage access can gain unauthorized access to production deployment environments

...