Vitessio vulnerabilities
We track 3 vulnerabilities in Vitessio products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 13, 2026.
Latest Vitessio vulnerabilities
- 9.8 Critical severity
vitess: Improper Neutralization of Input During Web Page Generation
Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dtid form values from the vttablet and vtcombo /twopcz HTTP debug endpoint into a t
- 8.8 High severity
vitess: Improper Limitation of a Pathname to a Restricted Directory
Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that files in the manifest — w
- 9.9 Critical severity
vitess: Improper Neutralization of Special Elements used in an OS Command
Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manipulate backup manifest files so that arbitrary code is later e