315 matches found
CVE-2025-22872 affecting package vitess for versions less than 17.0.7-8
CVE-2025-22872 affecting package vitess for versions less than 17.0.7-8. A patched version of the package is available...
CVE-2024-53257
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries executed by Vitess can write HTML into the monitoring page at will. These pages are rendered usin...
Azure Linux 3.0 Security Update: vitess (CVE-2024-53257)
The version of vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53257 advisory. - Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env...
AZL-60595 CVE-2025-22872 affecting package vitess for versions less than 17.0.7-8
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...
CVE-2024-53257 affecting package vitess for versions less than 19.0.4-7
CVE-2024-53257 affecting package vitess for versions less than 19.0.4-7. A patched version of the package is available...
CVE-2025-32395 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-356W-63V5-8WF4 vulnerabilities
Vulnerabilities for packages: vitess...
CVE-2025-32395 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-356W-63V5-8WF4 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2025-22870 affecting package vitess for versions less than 19.0.4-6
CVE-2025-22870 affecting package vitess for versions less than 19.0.4-6. A patched version of the package is available...
GHSA-XCJ6-PQ6G-QJ4X vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2025-31486 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-4R4M-QW57-CHR8 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2025-31125 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-4R4M-QW57-CHR8 vulnerabilities
Vulnerabilities for packages: vitess...
CVE-2025-31125 vulnerabilities
Vulnerabilities for packages: vitess...
Azure Linux 3.0 Security Update: azcopy / git-lfs / golang / influxdb / keda (CVE-2025-22870)
The version of azcopy / git-lfs / golang / influxdb / keda installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22870 advisory. - Matching of hosts against proxy patterns can improperly treat an IPv6...
CVE-2025-30208 vulnerabilities
Vulnerabilities for packages: vitess...