tocsin

Go/github.com/vitessio/vitess CVE-2024-32886: medium 4.9, EPSS 0.75%

Vitess vulnerable to infinite memory consumption and vtgate crash

Action: Upgrade github.com/vitessio/vitess to 17.0.7 or later.

go get github.com/vitessio/vitess@v19.0.4
go get github.com/vitessio/vitess@v18.0.5
go get github.com/vitessio/vitess@v17.0.7

Affected

introducedfixedlast affected
19.0.019.0.4-
18.0.018.0.5-
017.0.7-

Fixed versions

19.0.418.0.517.0.7

Sources

CVE-2024-32886 · published · modified · JSON