GHSA-XP26-3454-MJGP vulnerabilities

Vulnerabilities for packages: renovate, vitess...

GHSA-QXG6-89MG-RQV8 vulnerabilities

Vulnerabilities for packages: renovate, vitess...

CVE-2026-112949 vulnerabilities

Vulnerabilities for packages: renovate, vitess...

CVE-2026-112950 vulnerabilities

Vulnerabilities for packages: renovate, vitess...

CVE-2026-111759 vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce...

GHSA-R7FV-28H4-CVQ7 vulnerabilities

Vulnerabilities for packages: kibana, vitess, commercial-gitlab-rails-ee-fips, renovate, gitlab-rails-ce...

GHSA-R7FV-28H4-CVQ7 vulnerabilities

Vulnerabilities for packages: renovate, vitess...

CVE-2026-111759 vulnerabilities

Vulnerabilities for packages: renovate, vitess...

EUVD-2026-100525

Vitess vttablet /twopcz reflected XSS...

Vitess vttablet /twopcz reflected XSS

From: xylove21 To: [email protected] Subject: Security Report Vitess vttablet /twopcz reflected XSS Date: Tue, 24 Jun 2026 14:30:00 +0800 Summary The twopczHandler in go/vt/vttablet/tabletserver/twopcz.go line 185 reflects the Action and dtid form values directly into the HTML response body via...

GHSA-V75V-6FPF-GVW8 Vitess vttablet /twopcz reflected XSS

From: xylove21 To: [email protected] Subject: Security Report Vitess vttablet /twopcz reflected XSS Date: Tue, 24 Jun 2026 14:30:00 +0800 Summary The twopczHandler in go/vt/vttablet/tabletserver/twopcz.go line 185 reflects the Action and dtid form values directly into the HTML response body via...

CVE-2026-63772 affecting package vitess for versions less than 19.0.4-15

CVE-2026-63772 affecting package vitess for versions less than 19.0.4-15. A patched version of the package is available...

CVE-2026-78659 affecting package vitess for versions less than 19.0.4-15

CVE-2026-78659 affecting package vitess for versions less than 19.0.4-15. A patched version of the package is available...

CVE-2026-78660 affecting package vitess for versions less than 19.0.4-15

CVE-2026-78660 affecting package vitess for versions less than 19.0.4-15. A patched version of the package is available...

CVE-2026-97032 affecting package vitess for versions less than 19.0.4-15

CVE-2026-97032 affecting package vitess for versions less than 19.0.4-15. A patched version of the package is available...

CVE-2026-78669 affecting package vitess for versions less than 19.0.4-15

CVE-2026-78669 affecting package vitess for versions less than 19.0.4-15. A patched version of the package is available...

AZL-108039 CVE-2026-104252 affecting package vitess 19.0.4-14

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML...

CVE-2026-104252

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML...

CVE-2026-104252 Vitess vttablet /twopcz reflected XSS

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML...

CVE-2026-104252 Vitess vttablet /twopcz reflected XSS

Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a text/html response without HTML...