PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
vitess.io/vitess Vitess vttablet /twopcz reflected XSS Critical 9.8 7 hours ago 7 hours ago
vitess.io/vitess Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data Medium Risk 5.3 1 month ago 1 month ago
vitess.io/vitess Missing authorization on vttablet /debug/vrlog in vitess.io/vitess Unknown 1 month ago 1 month ago
vitess.io/vitess Vitess vulnerable to infinite memory consumption and vtgate crash Medium Risk 4.9 2 years ago 1 month ago
vitess.io/vitess vitess allows users to create keyspaces that can deny access to already existing keyspaces Medium Risk 4.1 3 years ago 1 month ago
vitess.io/vitess VTAdmin users that can create shards can deny access to other functions Medium Risk 4.1 3 years ago 1 month ago
vitess.io/vitess Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess Unknown 1 year ago 2 months ago
vitess.io/vitess Vitess allows HTML injection in /debug/querylogz & /debug/env Medium Risk 4.9 1 year ago 2 months ago
vitess.io/vitess Vitess users with backup storage access can write to arbitrary file paths on restore Critical 9.5 7 months ago 6 months ago
vitess.io/vitess Vitess users with backup storage access can gain unauthorized access to production deployment environments High Risk 8.0 7 months ago 6 months ago
vitess.io/vitess Vitess users with backup storage access can write to arbitrary file paths in vitess.io/vitess Unknown 7 months ago 6 months ago
vitess.io/vitess Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess Unknown 7 months ago 6 months ago
vitess.io/vitess Denial of service attack by triggering unbounded memory usage in vitess.io/vitess Unknown 2 years ago 2 years ago
vitess.io/vitess Improper handling of keyspaces in vitess.io/vitess Unknown 3 years ago 2 years ago
Data courtesy of OSV.dev
Page 1