vitess.io/vitess
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Go
- Vulnerability status
- 14 advisory(ies) without a verdict
Advisories (14)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-649x-hxfx-57j2 Vitess vulnerable to infinite memory consumption and vtgate crash | < 0.17.7 ; 0.18.0 – < 0.18.5 ; 0.19.0 – < 0.19.4 | Undetermined |
| GHSA-735r-hv67-g38f vitess allows users to create keyspaces that can deny access to already existing keyspaces | < 0.16.1 | Undetermined |
| GHSA-7mwh-q3xm-qh6p Vitess allows HTML injection in /debug/querylogz & /debug/env | 0.21.0-rc1 – < 0.21.1 ; 0.20.0-rc1 – < 0.20.4 ; < 0.19.8 | Undetermined |
| GHSA-8g8j-r87h-p36x Vitess users with backup storage access can gain unauthorized access to production deployment environments | ≤ 0.23.2 | Undetermined |
| GHSA-mhc4-g3wh-cw7m Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data | 0.24.0-rc1 – 0.24.2 ; ≤ 0.23.6 | Undetermined |
| GHSA-pqj7-jx24-wj7w VTAdmin users that can create shards can deny access to other functions | < 0.16.2 | Undetermined |
| GHSA-r492-hjgh-c9gw Vitess users with backup storage access can write to arbitrary file paths on restore | 0.23.0-rc1 – < 0.23.3 ; < 0.22.4 | Undetermined |
| GHSA-v75v-6fpf-gvw8 Vitess vttablet /twopcz reflected XSS | < 0.23.5 ; 0.24.0 – < 0.24.2 | Undetermined |
| GO-2023-1717 Improper handling of keyspaces in vitess.io/vitess | < 0.16.1 | Undetermined |
| GO-2024-2826 Denial of service attack by triggering unbounded memory usage in vitess.io/vitess | < 0.17.7 ; 0.18.0 – < 0.18.5 ; 0.19.0 – < 0.19.4 | Undetermined |
| GO-2024-3306 Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess | < 0.19.8 ; 0.20.0 – < 0.20.4 ; 0.21.0 – < 0.21.1 | Undetermined |
| GO-2026-4567 Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess | < 0.22.4 ; 0.23.0 – < 0.23.3 | Undetermined |
| GO-2026-4570 Vitess users with backup storage access can write to arbitrary file paths in vitess.io/vitess | < 0.22.4 ; 0.23.0-rc1 – < 0.23.3 | Undetermined |
| GO-2026-6356 Missing authorization on vttablet /debug/vrlog in vitess.io/vitess | < 0.23.6 ; 0.24.0-rc1 – < 0.24.3 | Undetermined |
Sources
| Source | Licence |
|---|