High
CVE-2026-27969
Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manip…
Tag: Vitess
All CVEs associated with "Vitess". Page 1/1 • 6 CVEs.
About “Vitess”
A curated feed of “Vitess”-related CVEs appears below. We currently track 6 CVEs for this tag (all time). In the last 365 days, 2 were published. Average CVSS is 6.1 (all time; 9.4 over 365d), and 33% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection').
In our taxonomy this topic maps to a MODERATE impact class. Databases, proxies, and web servers often need coordinated restarts and config checks. Patch only modules you deploy, verify TLS and authentication, and tune limits. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
Support & lifecycle: vitess
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| 24 | 24.0.1 | |||
| 23 | 23.0.4 | Soon | ||
| 22 | 22.0.4 | Expired | ||
| 21 | 21.0.6 | Expired | ||
| 20 | 20.0.8 | Expired | ||
| 19 | 19.0.10 | Expired | ||
| 18 | 18.0.8 | Expired | ||
| 17 | 17.0.7 | Expired | ||
| 16 | 16.0.7 | Expired | ||
| 15 | 15.0.5 | Expired | ||
| 14 | 14.0.5 | Expired | ||
| 13 | 13.0.3 | Expired |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS · RSS (expired) · ICS
Subscribe CVEs: RSS for “Vitess” · RSS (High+Critical only)
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0
2026-02-26
Critical
CVE-2026-27965
Vitess is a database clustering system for horizontal scaling of MySQL. Prior to versions 23.0.3 and 22.0.4, anyone with read/write access to the backup storage location (e.g. an S3 bucket) can manip…
2024-12-03
Medium
CVE-2024-53257
Vitess is a database clustering system for horizontal scaling of MySQL. The /debug/querylogz and /debug/env pages for vtgate and vttablet do not properly escape user input. The result is that queries…
2024-05-08
Medium
CVE-2024-32886
Vitess is a database clustering system for horizontal scaling of MySQL. When executing the following simple query, the `vtgate` will go into an endless loop that also keeps consuming memory and event…
2023-05-11
Medium
CVE-2023-29195
Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intentionally or inadvertently create a shard containing…
2023-04-14
Medium
CVE-2023-29194
Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace containing `/` characters such that from that point on, anyon…