Skip to content
OpenAdvisories

Vendor

vitessio

8 known vulnerabilities.

Products

vitess 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-104252

    Vitess vttablet /twopcz reflected XSS

    Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a …

    vitessio vitess vitess vitess.io/vitess Azure Linux Go
  • Critical 9.3
    CVE-2026-27969

    Vitess users with backup storage access can write to arbitrary file paths on restore

    Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that files in the manifest — …

    vitessio vitess vitess vitess.io/vitess Azure Linux Go