Start for Free
go

vitess.io/vitess

View on go registry
15 Total advisories
15 Vulnerabilities
0 Malware

Dependency scanning

Check whether vitess.io/vitess is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

Explore dependency scanning Explore AI SAST →

Vulnerabilities

CRITICAL 9.8
Go

CVE-2026-104252

Vitess vttablet /twopcz reflected XSS
UNKNOWN
Go

CVE-2026-104252

Vitess vttablet /twopcz reflected XSS in vitess.io/vitess
MEDIUM 5.3
Go

CVE-2026-65959

Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
UNKNOWN
Go

CVE-2026-65959

Missing authorization on vttablet /debug/vrlog in vitess.io/vitess
MEDIUM 4.9
Go

CVE-2024-32886

Vitess vulnerable to infinite memory consumption and vtgate crash
MEDIUM 4.1
Go

CVE-2023-29195

VTAdmin users that can create shards can deny access to other functions
MEDIUM 4.1
Go

CVE-2023-29194

vitess allows users to create keyspaces that can deny access to already existing keyspaces
UNKNOWN
Go

CVE-2024-53257

Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess
MEDIUM 4.9
Go

CVE-2024-53257

Vitess allows HTML injection in /debug/querylogz & /debug/env
UNKNOWN
Go

CVE-2026-27969

Vitess users with backup storage access can write to arbitrary file paths on restore
UNKNOWN
Go

CVE-2026-27965

Vitess users with backup storage access can gain unauthorized access to production deployment environments
UNKNOWN
Go

CVE-2026-27969

Vitess users with backup storage access can write to arbitrary file paths in vitess.io/vitess
UNKNOWN
Go

CVE-2026-27965

Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess
UNKNOWN
Go

CVE-2024-32886

Denial of service attack by triggering unbounded memory usage in vitess.io/vitess
UNKNOWN
Go

CVE-2023-29194

Improper handling of keyspaces in vitess.io/vitess

Browse more Go advisories

Learn What is SAST?

Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes