CVE-2026-76172 vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, yaml-language-server, argo-workflows, prism, jupyter-base-notebook, opensearch-dashboards...

GHSA-F65P-4M7J-42XC vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, yaml-language-server, argo-workflows, prism, jupyter-base-notebook, opensearch-dashboards...

GHSA-FPH4-WMHF-6FWF vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, yaml-language-server, argo-workflows, prism, jupyter-base-notebook, opensearch-dashboards...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, yaml-language-server, argo-workflows, prism, jupyter-base-notebook, opensearch-dashboards...

CVE-2026-9358 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, vitess...

GHSA-W9M9-85WC-3X92 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, vitess...

CVE-2026-75931 vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, yaml-language-server, prism, opensearch-dashboards...

GHSA-5JGF-P345-68V8 vulnerabilities

Vulnerabilities for packages: vitess, tileserver-gl, yaml-language-server, prism, opensearch-dashboards...

CVE-2026-45822 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, sqlpad, dotstatsuite-supercore, gitlab-rails-ce-fips, wazuh-dashboard-fips, kubeflow-pipelines, nextcloud-server, vitess, opensearch-dashboards-fips, kibana, gitlab-rails-ce, wazuh-dashboard, opensearch-dashboards,...

GHSA-VCC3-GHJQ-M6FR vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, sqlpad, dotstatsuite-supercore, gitlab-rails-ce-fips, wazuh-dashboard-fips, kubeflow-pipelines, nextcloud-server, vitess, opensearch-dashboards-fips, kibana, gitlab-rails-ce, wazuh-dashboard, opensearch-dashboards,...

CVE-2026-45822 vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, sqlpad, kubeflow-pipelines, opensearch-dashboards...

GHSA-VCC3-GHJQ-M6FR vulnerabilities

Vulnerabilities for packages: nextcloud-server, vitess, sqlpad, kubeflow-pipelines, opensearch-dashboards...

SUSE CVE-2026-65959

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

GHSA-MHC4-G3WH-CW7M Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data

Vulnerability Details File: go/vt/vttablet/tabletmanager/vreplication/vrlog.go Summary vttablet's /debug/vrlog HTTP endpoint streams live VReplication event data — including the literal SQL DML statements being replicated by MoveTables, Reshard, Materialize, and "vitess"-strategy Online DDL...

Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data

Vulnerability Details File: go/vt/vttablet/tabletmanager/vreplication/vrlog.go Summary vttablet's /debug/vrlog HTTP endpoint streams live VReplication event data — including the literal SQL DML statements being replicated by MoveTables, Reshard, Materialize, and "vitess"-strategy Online DDL...

AZL-96770 CVE-2026-65959 affecting package vitess for versions less than 19.0.4-13

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-65959

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-65959 Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...

CVE-2026-65959

In Vitess 24.0.2 and earlier, the /debug/vrlog endpoint in vrlog.go calls vrlogStatsHandler() without acl.CheckAccessHTTP(r, acl.DEBUGGING), unlike comparable debug endpoints. A remote attacker reaching the vttablet debug HTTP port can stream live VReplication SQL statements and bound application...

CVE-2026-65959

Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler without acl.CheckAccessHTTPr, acl.DEBUGGING, unlike comparable deb...