{"action":"Upgrade vitess.io/vitess to 0.23.5 or later.","affected":[{"fixed":"0.23.5","introduced":"0"},{"fixed":"0.24.2","introduced":"0.24.0"}],"component":"vitess.io/vitess","cve_ids":["CVE-2026-104252"],"ecosystem":"Go","exploited":false,"fixed_versions":["0.23.5","0.24.2"],"ghsa_id":"GHSA-v75v-6fpf-gvw8","id":"tcs_01M5JHG7C5CYCKF5P7MQ6CEGW2","modified_at":"2026-10-15T20:30:05.447638204Z","published_at":"2026-10-15T20:16:29Z","references":["https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8","https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8","https://nvd.nist.gov/vuln/detail/CVE-2026-104252","https://github.com/vitessio/vitess/pull/20255","https://github.com/vitessio/vitess/pull/20273","https://github.com/vitessio/vitess/pull/20274","https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2","https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af","https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7","https://github.com/vitessio/vitess","https://github.com/vitessio/vitess/releases/tag/v23.0.5","https://github.com/vitessio/vitess/releases/tag/v24.0.2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v75v-6fpf-gvw8","url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8"}],"summary":"Vitess vttablet /twopcz reflected XSS"}