{"action":"Upgrade vitess.io/vitess to 0.16.2 or later.","affected":[{"fixed":"0.16.2","introduced":"0"}],"component":"vitess.io/vitess","cve_ids":["CVE-2023-29195"],"ecosystem":"Go","epss":0.00983,"exploited":false,"fixed_versions":["0.16.2"],"ghsa_id":"GHSA-pqj7-jx24-wj7w","id":"tcs_01M5KFHR68H6STHG9SGT50YVZT","modified_at":"2026-09-10T03:49:53.749637766Z","published_at":"2023-05-11T19:40:49Z","references":["https://osv.dev/vulnerability/GHSA-pqj7-jx24-wj7w","https://github.com/vitessio/vitess/security/advisories/GHSA-pqj7-jx24-wj7w","https://nvd.nist.gov/vuln/detail/CVE-2023-29195","https://github.com/vitessio/vitess/issues/12842","https://github.com/vitessio/vitess/pull/12843","https://github.com/vitessio/vitess/commit/9dcbd7de3180f47e94f54989fb5c66daea00c920","https://github.com/vitessio/vitess","https://github.com/vitessio/vitess/releases/tag/v16.0.2","https://pkg.go.dev/vitess.io/vitess@v0.16.2"],"severity":{"label":"medium","score":4.1},"sources":[{"source":"osv","source_id":"GHSA-pqj7-jx24-wj7w","url":"https://osv.dev/vulnerability/GHSA-pqj7-jx24-wj7w"}],"summary":"VTAdmin users that can create shards can deny access to other functions"}