High · 7.0 CVE-2025-8863 EUVD-2025-24144GHSA-58pc-g9rc-gr6v

YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission

Published Aug 11, 2025 · Updated Aug 11, 2025 · Assigned by Yugabyte

Description

Vendor	Product	Affected	Fixed
YugabyteDB	YugabyteDB	2024.1.0 – < 2024.1.3, 2.20.0.0 – < 2.20.7.0, 2.23.0.0 – < 2.23.1.0	2024.1.3