{"schemaVersion":3,"id":"CVE-2026-65959","aliases":["CGA-22mc-jjp9-74xc","CGA-23v3-jf7j-c2w8","CGA-2485-65r7-4w76","CGA-26w9-gqp5-f2jr","CGA-282h-grh9-c8hh","CGA-2866-m2vv-xcrv","CGA-29fw-h6gx-8h78","CGA-2ghq-vgwc-qmwx","CGA-2hg9-x24c-r27c","CGA-2hqg-jp4w-2qv8","CGA-2rw5-gcfg-cc43","CGA-2v5w-jf2m-c34x","CGA-2vvf-vg78-5549","CGA-2xg5-v9xw-mc7f","CGA-2xrh-5wg7-rr88","CGA-366c-3fqr-j7fp","CGA-36cp-xhmw-rf82","CGA-36f6-rwmx-m78h","CGA-37xq-whmp-5c5j","CGA-3f5m-c8q4-w3cc","CGA-3fwm-3hf5-h2q7","CGA-3hxc-6jw5-cpff","CGA-3jw9-vc9q-hc7w","CGA-3pvj-2g46-wqw7","CGA-3r9r-rffc-x65w","CGA-3v5p-82g9-626v","CGA-3v99-6j28-82cq","CGA-3x8h-j9fw-p562","CGA-442h-87fg-pc9w","CGA-472g-vg5v-gq8v","CGA-477r-gp7c-qqv8","CGA-47w7-86gc-wcc6","CGA-48q8-v4fc-7c64","CGA-4c4g-g3hh-qq7h","CGA-4c7j-m5c8-v7mm","CGA-4cm6-6mq2-hjq2","CGA-4gfr-vh7f-v6fm","CGA-4mvq-r874-f664","CGA-4pr2-4fvg-q64q","CGA-4w65-mg6h-fwmh","CGA-4wg4-rm9j-6wpw","CGA-5328-rfq5-59p9","CGA-5458-j8xw-73qf","CGA-57qv-h255-p4x9","CGA-585h-84m6-2cmm","CGA-59mj-59wx-34gj","CGA-5hwx-xwh2-93gx","CGA-5p4g-hw7c-g38p","CGA-5vmc-gpjq-vv8p","CGA-6538-xmp7-2rmw","CGA-6672-7mgx-2chp","CGA-6jgq-24fh-j4gh","CGA-6rhf-wppw-4jvj","CGA-6x28-3r8x-cj9v","CGA-74hc-rj64-x4xf","CGA-763r-v6qg-cfvm","CGA-76hx-rfhp-f5rm","CGA-78x6-pqf5-3r79","CGA-79rg-mp6w-w92q","CGA-7c4q-xm52-p244","CGA-82gc-hqhm-f649","CGA-83f9-327x-rxvf","CGA-8559-88mx-ch6x","CGA-87rr-fw8g-q7x9","CGA-87vq-5m6x-vhg9","CGA-87w3-c8xm-vvfx","CGA-8c2c-xrh3-x87f","CGA-8f25-m9f8-693h","CGA-8m25-84jq-xjh6","CGA-8m37-vc98-24cq","CGA-8mj6-qx7h-vr3p","CGA-8ppj-p4h3-wwcf","CGA-8q3c-g482-h6hv","CGA-8wvg-566p-735c","CGA-8x45-g5r9-393g","CGA-8x65-9wm6-79f2","CGA-92qx-wc3f-45j5","CGA-978j-cwv3-4c96","CGA-98q6-p7h2-9cmf","CGA-9gx2-94c7-v96r","CGA-9hfh-rqj3-mr29","CGA-9rpv-mvwm-68xm","CGA-c3qm-7w25-j25g","CGA-c7pc-v2v2-5895","CGA-c89w-gch7-mg97","CGA-cf25-56j8-76rg","CGA-chvj-x25h-j2v5","CGA-cj55-mqhg-8jq5","CGA-cmh7-8jjm-9rqj","CGA-cqfq-p4ff-gpcq","CGA-cqjc-pmmg-mgp2","CGA-cvqv-89pg-hm8m","CGA-cw37-pp96-6m87","CGA-cw6p-qc55-3w94","CGA-f352-p97w-f4w7","CGA-f42m-mfxg-f8jp","CGA-f4xp-3g4p-rpp7","CGA-f7p4-wq2g-7cq3","CGA-fc2h-2ggp-g3h3","CGA-fjpq-6fx9-rvh9","CGA-fm4p-3m9w-xmpc","CGA-fpq6-722m-q74m","CGA-frwx-wx8c-vhrx","CGA-fw62-cjc9-367f","CGA-fxff-32rp-77vv","CGA-g348-3pf6-2j87","CGA-g5pf-frmr-wp9m","CGA-g8fr-w6x3-f96j","CGA-g95x-5h46-8h28","CGA-g9c9-h5m8-r6ch","CGA-g9jg-xx6f-rmqh","CGA-gfq8-6grv-pxqm","CGA-gh3c-8499-jq7q","CGA-gp27-jq34-fwg8","CGA-gp7f-hjvg-wjvp","CGA-gpqc-66m2-x8rc","CGA-grrr-2fgc-fxp8","CGA-gw7p-jx88-jh45","CGA-h2pp-w2x6-h9xf","CGA-h4hj-w467-66v3","CGA-hfvw-8x32-38cp","CGA-hj4g-ccq3-qcmp","CGA-hmgh-mpxf-gmfp","CGA-hrw5-4j2v-9565","CGA-hx92-fv48-cw7q","CGA-j5p3-2344-v6gx","CGA-j73x-x2rf-p6pf","CGA-j746-22j2-835j","CGA-j82g-6pgw-4vh2","CGA-jc56-hp47-fhcw","CGA-jg9r-98gq-2xc9","CGA-jj6m-jrv2-gj5h","CGA-jjf5-wcmw-7jm2","CGA-jm4q-hg4p-wxgj","CGA-jpw4-rh84-43p9","CGA-jqpm-44jq-4mw8","CGA-jr6v-8fg9-9wgh","CGA-jrwg-vjpv-33fh","CGA-jvqv-88hv-8hh3","CGA-jwjc-qw2h-5f5h","CGA-jwrq-p8hj-fpvp","CGA-m22f-5vf6-jrjw","CGA-m22g-jj4x-85hw","CGA-m5v9-8jcq-w6vg","CGA-m956-4mqx-cqwr","CGA-mgrw-p33j-7w6c","CGA-mhjf-q3cw-7j3q","CGA-mp25-gcxm-g73r","CGA-mppj-3qjv-hmm6","CGA-mq3c-pv9c-wh34","CGA-p32w-ghj6-7jw8","CGA-p3c8-vfpp-h42m","CGA-p42v-8pcg-86rw","CGA-p67h-wxrw-h942","CGA-p6cp-6x7f-hr2q","CGA-p764-wrmv-jv7f","CGA-p86w-8h9h-cr4r","CGA-p9p9-6x98-9ggv","CGA-pfp9-f8hf-2pmr","CGA-pfr2-8646-87hh","CGA-pj56-rh55-9w98","CGA-pr75-36w5-chx8","CGA-pwhh-j7r7-r7xc","CGA-px4w-xgfm-j5rv","CGA-px93-h5mv-qq64","CGA-q22q-w6w6-9rw8","CGA-q339-mxqq-cpjv","CGA-q9fw-3jp8-4w9r","CGA-qcwc-7vg7-5p6x","CGA-qfmj-rc74-3j7f","CGA-qm28-w95h-8vj4","CGA-qmw5-ch76-grh5","CGA-qv8g-52p5-r9f2","CGA-qvp4-c4fr-2vcr","CGA-r67r-vqfh-3x54","CGA-r79q-2fv4-hwh5","CGA-r7rj-qrx3-q3qr","CGA-rf86-jmfv-4723","CGA-rhvq-687h-5m9p","CGA-rmx6-9jrr-cqj2","CGA-rq44-gg6r-r6qq","CGA-rv9q-x7v3-33f9","CGA-v7r5-3wmq-224q","CGA-v845-x2wv-gfpq","CGA-v8p6-vjr7-x7pc","CGA-v9hp-pfrh-gqwm","CGA-vffx-c9fm-xjxw","CGA-vgv4-hvjj-6pj5","CGA-vhx4-988m-grm4","CGA-vpcp-p9gw-chxr","CGA-w4pf-5g48-pq2q","CGA-w5vq-5mp8-7wpw","CGA-w76p-4w76-v4cc","CGA-w7vj-cfm8-hxcq","CGA-wg25-3cqx-hw93","CGA-wgv9-9765-pvxg","CGA-wm26-5869-r7q9","CGA-wm8p-66v8-hpx7","CGA-wmq2-jrfm-5qwg","CGA-wxqr-wr2f-5w9p","CGA-x78r-mrcw-wx29","CGA-x7rp-r5hp-54xc","CGA-x8j3-r9m4-w7pc","CGA-x974-v2j4-5qjq","CGA-xc33-2g7x-r675","CGA-xf58-hmqr-wq97","CGA-xhrf-cfrp-qmr2","CGA-xj6f-w7j7-5m4p","CGA-xjhh-7g23-58m5","CGA-xmgg-r5vq-6x39","CGA-xq5c-hg44-g72h","GHSA-mhc4-g3wh-cw7m","GO-2026-6356","CGA-22pq-mg5j-3jgh","CGA-28r7-f9vm-fpph","CGA-2f43-65gf-jw9h","CGA-2mrq-hxx6-mpm8","CGA-2q2f-23mc-9p3g","CGA-2rf3-g2h3-8g7f","CGA-2wqc-7hfq-55c9","CGA-2xgv-267f-w79m","CGA-3635-8qg3-377w","CGA-383p-76vw-6p7f","CGA-3cr2-jjcw-9867","CGA-3ghq-993p-gf82","CGA-3phr-p4g9-vwmm","CGA-47pj-f2wv-fg5x","CGA-47rv-4w5r-cc57","CGA-4cxc-94j9-jfpq","CGA-4g79-rc73-cmq9","CGA-4gxg-c3xf-73mg","CGA-4p7j-c24g-fcmg","CGA-4wp7-rf54-x732","CGA-54m7-3ph3-h2pc","CGA-5gqc-3pwm-fcc9","CGA-5j88-crfx-6r47","CGA-5xwc-fxvg-977j","CGA-66j4-jhjp-8pf5","CGA-69j4-93c6-wc8p","CGA-6rr2-gr4h-7qcx","CGA-6xc7-p846-4q57","CGA-75j5-cqh6-r5r4","CGA-788g-h7cg-hj9q","CGA-7cmh-xg98-5792","CGA-7jv4-mggf-856j","CGA-7pj6-r6c5-rpr9","CGA-7v4c-63x6-r7qr","CGA-8999-w82m-pwch","CGA-8c55-7pjv-2x53","CGA-8gxf-c299-g667","CGA-8qm8-p62h-p9mr","CGA-985h-vvg4-2cj6","CGA-9pj4-4q9h-3hxf","CGA-9r9h-4w7f-x7mr","CGA-9xhc-29xq-9m5g","CGA-cfj3-3x35-4hm2","CGA-cgwr-cqgr-p49q","CGA-cmpp-cr6g-c2x6","CGA-cq86-8fqq-gf98","CGA-cxmg-29xp-wx6c","CGA-f2q3-58rw-8hxf","CGA-f6j6-49f9-jvgf","CGA-f6qf-4j8v-5j65","CGA-f7w7-56c6-r3rr","CGA-fmq8-4qmc-qh6c","CGA-fpxc-36r7-8xf3","CGA-fq3m-cfqx-83v9","CGA-frq6-x5hw-whwx","CGA-fvjw-f5v8-wm6g","CGA-g79v-4vc7-c7cx","CGA-gfcq-gjvq-j5wv","CGA-gh77-mrg9-vp54","CGA-gp36-9q6r-652w","CGA-gvhj-6whc-rg6p","CGA-gxq2-fmmh-g46j","CGA-h25m-qg5g-fm9j","CGA-h6mc-pjw9-96fg","CGA-h94p-5rx3-hqhc","CGA-jfx5-ccg4-q27g","CGA-m363-wm57-w7f5","CGA-m7fp-5fc6-qqwx","CGA-m8jr-p2v3-ff6f","CGA-m9x5-f2p2-9vmh","CGA-mq7p-5qj5-7gq2","CGA-mvrc-r56j-9cjr","CGA-p7gm-p53f-vhp3","CGA-pf57-mgjm-24ch","CGA-pmf9-7ww4-p72p","CGA-pmr9-g4wv-jq2m","CGA-pqmp-f444-58hg","CGA-pqmv-75fq-22p6","CGA-pr32-w3rf-2h83","CGA-q2jf-jf8q-pvvw","CGA-q63m-pw7w-87rx","CGA-qm8c-7355-fhr2","CGA-r4hc-w4wj-h8gw","CGA-r9wg-3h67-7qw7","CGA-rcc2-72fg-jp78","CGA-rfr3-q533-5jw6","CGA-rhj4-jf26-3wrx","CGA-rj3p-v8h5-57x4","CGA-rxfx-xjv8-4j2h","CGA-v4cx-hx2h-g24x","CGA-vc6j-6p23-m6cp","CGA-vgj3-275v-cw2g","CGA-w333-q5rx-5p6j","CGA-w6f5-x7wj-5rpj","CGA-w8rv-6r2m-ch6x","CGA-wv8x-7448-xgfp","CGA-wxfv-h4fm-3rg7","CGA-x4hq-mwp8-6jwv","CGA-x5p5-j9pq-3j3p","CGA-x8mp-84pr-xgpq","CGA-xh5q-7589-h37h","CGA-xhj9-r948-hrp2","CGA-xjmp-7rch-5mqr","CGA-xm37-5g67-9rcm","CGA-xw7w-64hj-34q9","CGA-xxmx-wx65-6hfp"],"status":"published","duplicateOf":null,"title":null,"description":"Vitess is a database clustering system for horizontal scaling of MySQL. In 24.0.2 and earlier, the /debug/vrlog endpoint registered by addHttpEndpoint() in go/vt/vttablet/tabletmanager/vreplication/vrlog.go invokes vrlogStatsHandler() without acl.CheckAccessHTTP(r, acl.DEBUGGING), unlike comparable debug endpoints. A remote caller who can reach the vttablet debug HTTP port can bypass the configured security policy and stream VrLogStats data produced from NewVrLogStats().Send(), including literal SQL statements and bound application values from MoveTables, Reshard, Materialize, and vitess-strategy Online DDL workflows","dates":{"published":"2026-08-18T18:18:46.919Z","modified":"2026-08-18T18:41:22.307Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":10,"impact":2.3,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00426,"percentile":0.35568,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.03299999999999996,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00393},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00312,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00426,"percentile":0.35568}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00393,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00426,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00426,"percentile":0.35568}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-862","name":"Missing Authorization","description":"The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/862.html"}],"affected":[{"vendor":"chainguard","product":"vitess-22","name":"vitess-22","label":"vitess-22","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-22","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-22-binaries","name":"vitess-22-binaries","label":"vitess-22-binaries","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-22-binaries","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-23","name":"vitess-23","label":"vitess-23","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-23","purlType":"apk","versions":[{"text":"< 23.0.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 23.0.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-23-binaries","name":"vitess-23-binaries","label":"vitess-23-binaries","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-23-binaries","purlType":"apk","versions":[{"text":"< 23.0.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 23.0.7-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-24","name":"vitess-24","label":"vitess-24","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-24","purlType":"apk","versions":[{"text":"< 24.0.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.0.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-24-binaries","name":"vitess-24-binaries","label":"vitess-24-binaries","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-24-binaries","purlType":"apk","versions":[{"text":"< 24.0.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.0.3-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"vitess-24-compat","name":"vitess-24-compat","label":"vitess-24-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/vitess-24-compat","purlType":"apk","versions":[{"text":"< 24.0.3-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.0.3-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"vitess-23","name":"vitess-23","label":"vitess-23","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/vitess-23","purlType":"apk","versions":[{"text":"< 23.0.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 23.0.7-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"vitess-23-binaries","name":"vitess-23-binaries","label":"vitess-23-binaries","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/vitess-23-binaries","purlType":"apk","versions":[{"text":"< 23.0.7-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 23.0.7-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"vitess-24","name":"vitess-24","label":"vitess-24","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/vitess-24","purlType":"apk","versions":[{"text":"< 24.0.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.0.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"vitess-24-binaries","name":"vitess-24-binaries","label":"vitess-24-binaries","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/vitess-24-binaries","purlType":"apk","versions":[{"text":"< 24.0.3-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.0.3-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"vitess-24-compat","name":"vitess-24-compat","label":"vitess-24-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/vitess-24-compat","purlType":"apk","versions":[{"text":"< 24.0.3-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.0.3-r7","eol":null,"hubHref":null},{"vendor":"vitess.io","product":"vitess","name":"vitess.io/vitess","label":"vitess","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/vitess.io/vitess","purlType":"golang","versions":[{"text":"≥ 0.24.0-rc1, ≤ 0.24.2","noFixRecorded":false,"fixedIn":null},{"text":"≤ 0.23.6","noFixRecorded":false,"fixedIn":null},{"text":"≥ 0.24.0-rc1, < 0.24.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.24.0-rc1, ≤ 0.24.2 | ≤ 0.23.6 | ≥ 0.24.0-rc1, < 0.24.3","eol":null,"hubHref":null},{"vendor":"vitessio","product":"vitess","name":"vitess","label":"vitess","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 24.0.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 24.0.2","eol":null,"hubHref":"/vendor/vitessio/vitess"}],"affectedCount":14,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","label":"github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","label":"github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","label":"github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb","label":"github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-65959","label":"nvd.nist.gov/vuln/detail/CVE-2026-65959","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/vitessio/vitess/pull/20467","label":"github.com/vitessio/vitess/pull/20467","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://github.com/vitessio/vitess","label":"github.com/vitessio/vitess","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21897-1","SUSE-SU-2026:23855-1","SUSE-SU-2026:23863-1"],"duplicates":[],"related":["CGA-7QPM-X8MP-4V9F","OPENSUSE-SU-2026:21897-1","SUSE-SU-2026:23855-1","SUSE-SU-2026:23863-1"]},"timeline":[{"kind":"published","date":"2026-08-18T18:18:46.919Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-18T18:41:22.307Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":21,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T16:19:57.908Z","stale":false,"partial":false}}