Vulnerability GO-2026-6798
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:53 PM UTC
Vitess vttablet /twopcz reflected XSS in vitess.io/vitess
<0.23.5, >=0.24.0 <0.24.2
<0.23.5, >=0.24.0 <0.24.2
Summary
Vitess vttablet /twopcz reflected XSS in vitess.io/vitess
Details
Vitess vttablet /twopcz reflected XSS in vitess.io/vitess
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
21 days ago
Vitess vttablet /twopcz reflected XSS
<0.23.5, >=0.24.0 <0.24.2 GHSA-v75v-6fpf-gvw8
<0.23.5, >=0.24.0 <0.24.2 GHSA-v75v-6fpf-gvw8
Unknown
1 month ago
Missing authorization on vttablet /debug/vrlog in vitess.io/vitess
<0.23.6, >=0.24.0-rc1 <0.24.3 GO-2026-6356
<0.23.6, >=0.24.0-rc1 <0.24.3 GO-2026-6356
Medium Risk
2 months ago
Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data
>=0.24.0-rc1 <=0.24.2, <=0.23.6 GHSA-mhc4-g3wh-cw7m
>=0.24.0-rc1 <=0.24.2, <=0.23.6 GHSA-mhc4-g3wh-cw7m
Unknown
8 months ago
Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess
<0.22.4, >=0.23.0 <0.23.3 GO-2026-4567
<0.22.4, >=0.23.0 <0.23.3 GO-2026-4567
Unknown
8 months ago
Vitess users with backup storage access can write to arbitrary file paths in vitess.io/vitess
<0.22.4, >=0.23.0-rc1 <0.23.3 GO-2026-4570
<0.22.4, >=0.23.0-rc1 <0.23.3 GO-2026-4570
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:53 PM UTC
Fixed (v0.23.5)
4 months ago
June 24, 2026 at 03:33 PM UTC
Fixed (v0.24.2)
4 months ago
June 24, 2026 at 04:25 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC