Go/vitess.io/vitess

Vitess vulnerable to infinite memory consumption and vtgate crash

Modified: 9/10/2026

vitess allows users to create keyspaces that can deny access to already existing keyspaces

Modified: 9/10/2026

Vitess allows HTML injection in /debug/querylogz & /debug/env

Modified: 8/7/2026

Vitess users with backup storage access can gain unauthorized access to production deployment environments

Modified: 3/23/2026

Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data

Modified: 9/15/2026

VTAdmin users that can create shards can deny access to other functions

Modified: 9/10/2026

Vitess users with backup storage access can write to arbitrary file paths on restore

Modified: 3/23/2026

Improper handling of keyspaces in vitess.io/vitess

Modified: 5/20/2024

Denial of service attack by triggering unbounded memory usage in vitess.io/vitess

Modified: 7/9/2024

Vitess allows HTML injection in /debug/querylogz and /debug/env in vitess.io/vitess

Modified: 8/7/2026

Vitess users can gain unauthorized access to production deployment environments in vitess.io/vitess

Modified: 3/23/2026

Vitess users with backup storage access can write to arbitrary file paths in vitess.io/vitess

Modified: 3/23/2026

Missing authorization on vttablet /debug/vrlog in vitess.io/vitess

Modified: 9/15/2026