{"schema_version":"2","view":"grouped","data":[{"id":70953,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-c7pc-v2v2-5895","summary":"CGA-c7pc-v2v2-5895","evidence":"osv:CGA-c7pc-v2v2-5895","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7pc-v2v2-5895","aliases":["CGA-c7pc-v2v2-5895"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:28:03.766222586Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7pc-v2v2-5895","advisory_id":"164f1709-4e34-499e-911f-79d6d6b1a95b","event_types":["advisory"],"published_at":"2026-10-25T22:45:27.364942+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:16+00:00","detail_url":"/advisories/advisory%3A164f1709-4e34-499e-911f-79d6d6b1a95b","group":{"id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","revision":1,"primary_event_id":71324,"change":"published","superseded_by":[],"changed":{"id":71324,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-c7pc-v2v2-5895","summary":"CGA-c7pc-v2v2-5895","evidence":"osv:CGA-c7pc-v2v2-5895","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7pc-v2v2-5895","aliases":["CGA-c7pc-v2v2-5895"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:28:03.766222586Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7pc-v2v2-5895","advisory_id":"164f1709-4e34-499e-911f-79d6d6b1a95b","event_types":["advisory"],"published_at":"2026-10-25T22:45:27.364942+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:16+00:00","detail_url":"/events/71324"},"members":[{"id":71324,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-c7pc-v2v2-5895","summary":"CGA-c7pc-v2v2-5895","evidence":"osv:CGA-c7pc-v2v2-5895","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7pc-v2v2-5895","aliases":["CGA-c7pc-v2v2-5895"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:28:03.766222586Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7pc-v2v2-5895","advisory_id":"164f1709-4e34-499e-911f-79d6d6b1a95b","event_types":["advisory"],"published_at":"2026-10-25T22:45:27.364942+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:16+00:00","detail_url":"/events/71324"}]}},{"id":70952,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6538-xmp7-2rmw","summary":"CGA-6538-xmp7-2rmw","evidence":"osv:CGA-6538-xmp7-2rmw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6538-xmp7-2rmw","aliases":["CGA-6538-xmp7-2rmw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:03.709111778Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6538-xmp7-2rmw","advisory_id":"8b78dfee-6fd6-4726-beea-03c2cc58623d","event_types":["advisory"],"published_at":"2026-10-25T22:45:25.98295+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/advisories/advisory%3A8b78dfee-6fd6-4726-beea-03c2cc58623d","group":{"id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","revision":1,"primary_event_id":71323,"change":"published","superseded_by":[],"changed":{"id":71323,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6538-xmp7-2rmw","summary":"CGA-6538-xmp7-2rmw","evidence":"osv:CGA-6538-xmp7-2rmw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6538-xmp7-2rmw","aliases":["CGA-6538-xmp7-2rmw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:03.709111778Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6538-xmp7-2rmw","advisory_id":"8b78dfee-6fd6-4726-beea-03c2cc58623d","event_types":["advisory"],"published_at":"2026-10-25T22:45:25.98295+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71323"},"members":[{"id":71323,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6538-xmp7-2rmw","summary":"CGA-6538-xmp7-2rmw","evidence":"osv:CGA-6538-xmp7-2rmw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6538-xmp7-2rmw","aliases":["CGA-6538-xmp7-2rmw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:03.709111778Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6538-xmp7-2rmw","advisory_id":"8b78dfee-6fd6-4726-beea-03c2cc58623d","event_types":["advisory"],"published_at":"2026-10-25T22:45:25.98295+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71323"}]}},{"id":70951,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-978j-cwv3-4c96","summary":"CGA-978j-cwv3-4c96","evidence":"osv:CGA-978j-cwv3-4c96","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-978j-cwv3-4c96","aliases":["CGA-978j-cwv3-4c96"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:03.417746620Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-978j-cwv3-4c96","advisory_id":"7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.940718+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:20+00:00","detail_url":"/advisories/advisory%3A7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","group":{"id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","revision":1,"primary_event_id":71322,"change":"published","superseded_by":[],"changed":{"id":71322,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-978j-cwv3-4c96","summary":"CGA-978j-cwv3-4c96","evidence":"osv:CGA-978j-cwv3-4c96","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-978j-cwv3-4c96","aliases":["CGA-978j-cwv3-4c96"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:03.417746620Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-978j-cwv3-4c96","advisory_id":"7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.940718+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:20+00:00","detail_url":"/events/71322"},"members":[{"id":71322,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-978j-cwv3-4c96","summary":"CGA-978j-cwv3-4c96","evidence":"osv:CGA-978j-cwv3-4c96","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-978j-cwv3-4c96","aliases":["CGA-978j-cwv3-4c96"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:03.417746620Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-978j-cwv3-4c96","advisory_id":"7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.940718+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:20+00:00","detail_url":"/events/71322"}]}},{"id":70945,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-rmx6-9jrr-cqj2","summary":"CGA-rmx6-9jrr-cqj2","evidence":"osv:CGA-rmx6-9jrr-cqj2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmx6-9jrr-cqj2","aliases":["CGA-rmx6-9jrr-cqj2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:02.396389955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmx6-9jrr-cqj2","advisory_id":"7fda528d-8c03-4a7e-8bbd-e340c6ff057d","event_types":["advisory"],"published_at":"2026-10-25T22:45:13.825644+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/advisories/advisory%3A7fda528d-8c03-4a7e-8bbd-e340c6ff057d","group":{"id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","revision":1,"primary_event_id":71316,"change":"published","superseded_by":[],"changed":{"id":71316,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-rmx6-9jrr-cqj2","summary":"CGA-rmx6-9jrr-cqj2","evidence":"osv:CGA-rmx6-9jrr-cqj2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmx6-9jrr-cqj2","aliases":["CGA-rmx6-9jrr-cqj2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:02.396389955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmx6-9jrr-cqj2","advisory_id":"7fda528d-8c03-4a7e-8bbd-e340c6ff057d","event_types":["advisory"],"published_at":"2026-10-25T22:45:13.825644+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71316"},"members":[{"id":71316,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-rmx6-9jrr-cqj2","summary":"CGA-rmx6-9jrr-cqj2","evidence":"osv:CGA-rmx6-9jrr-cqj2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmx6-9jrr-cqj2","aliases":["CGA-rmx6-9jrr-cqj2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:02.396389955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmx6-9jrr-cqj2","advisory_id":"7fda528d-8c03-4a7e-8bbd-e340c6ff057d","event_types":["advisory"],"published_at":"2026-10-25T22:45:13.825644+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71316"}]}},{"id":70942,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-h2pp-w2x6-h9xf","summary":"CGA-h2pp-w2x6-h9xf","evidence":"osv:CGA-h2pp-w2x6-h9xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h2pp-w2x6-h9xf","aliases":["CGA-h2pp-w2x6-h9xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:01.927366377Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h2pp-w2x6-h9xf","advisory_id":"9b658d83-cca7-4eb4-b920-ce3e08632426","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.949309+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:05+00:00","detail_url":"/advisories/advisory%3A9b658d83-cca7-4eb4-b920-ce3e08632426","group":{"id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","revision":1,"primary_event_id":71313,"change":"published","superseded_by":[],"changed":{"id":71313,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-h2pp-w2x6-h9xf","summary":"CGA-h2pp-w2x6-h9xf","evidence":"osv:CGA-h2pp-w2x6-h9xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h2pp-w2x6-h9xf","aliases":["CGA-h2pp-w2x6-h9xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:01.927366377Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h2pp-w2x6-h9xf","advisory_id":"9b658d83-cca7-4eb4-b920-ce3e08632426","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.949309+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:05+00:00","detail_url":"/events/71313"},"members":[{"id":71313,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-h2pp-w2x6-h9xf","summary":"CGA-h2pp-w2x6-h9xf","evidence":"osv:CGA-h2pp-w2x6-h9xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h2pp-w2x6-h9xf","aliases":["CGA-h2pp-w2x6-h9xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:01.927366377Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h2pp-w2x6-h9xf","advisory_id":"9b658d83-cca7-4eb4-b920-ce3e08632426","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.949309+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:05+00:00","detail_url":"/events/71313"}]}},{"id":70941,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-98q6-p7h2-9cmf","summary":"CGA-98q6-p7h2-9cmf","evidence":"osv:CGA-98q6-p7h2-9cmf","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-98q6-p7h2-9cmf","aliases":["CGA-98q6-p7h2-9cmf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-98q6-p7h2-9cmf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-98q6-p7h2-9cmf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:28:01.780552674Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:46dcae08-5ad4-4fa7-9906-e9c8f350122a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-98q6-p7h2-9cmf","advisory_id":"46dcae08-5ad4-4fa7-9906-e9c8f350122a","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.026826+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:53+00:00","detail_url":"/advisories/advisory%3A46dcae08-5ad4-4fa7-9906-e9c8f350122a","group":{"id":"advisory:46dcae08-5ad4-4fa7-9906-e9c8f350122a","revision":1,"primary_event_id":71312,"change":"published","superseded_by":[],"changed":{"id":71312,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-98q6-p7h2-9cmf","summary":"CGA-98q6-p7h2-9cmf","evidence":"osv:CGA-98q6-p7h2-9cmf","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-98q6-p7h2-9cmf","aliases":["CGA-98q6-p7h2-9cmf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-98q6-p7h2-9cmf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-98q6-p7h2-9cmf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:28:01.780552674Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:46dcae08-5ad4-4fa7-9906-e9c8f350122a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-98q6-p7h2-9cmf","advisory_id":"46dcae08-5ad4-4fa7-9906-e9c8f350122a","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.026826+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:53+00:00","detail_url":"/events/71312"},"members":[{"id":71312,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-98q6-p7h2-9cmf","summary":"CGA-98q6-p7h2-9cmf","evidence":"osv:CGA-98q6-p7h2-9cmf","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-98q6-p7h2-9cmf","aliases":["CGA-98q6-p7h2-9cmf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-98q6-p7h2-9cmf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-98q6-p7h2-9cmf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:28:01.780552674Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:46dcae08-5ad4-4fa7-9906-e9c8f350122a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-98q6-p7h2-9cmf","advisory_id":"46dcae08-5ad4-4fa7-9906-e9c8f350122a","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.026826+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:53+00:00","detail_url":"/events/71312"}]}},{"id":70937,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fjpq-6fx9-rvh9","summary":"CGA-fjpq-6fx9-rvh9","evidence":"osv:CGA-fjpq-6fx9-rvh9","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fjpq-6fx9-rvh9","aliases":["CGA-fjpq-6fx9-rvh9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fjpq-6fx9-rvh9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fjpq-6fx9-rvh9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:52Z"}]}}],"modified":"2026-10-02T18:28:00.472086446Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c39d2ba7-8117-4473-a508-cff79845d905","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fjpq-6fx9-rvh9","advisory_id":"c39d2ba7-8117-4473-a508-cff79845d905","event_types":["advisory"],"published_at":"2026-10-25T22:45:05.882964+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:57+00:00","detail_url":"/advisories/advisory%3Ac39d2ba7-8117-4473-a508-cff79845d905","group":{"id":"advisory:c39d2ba7-8117-4473-a508-cff79845d905","revision":1,"primary_event_id":71308,"change":"published","superseded_by":[],"changed":{"id":71308,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fjpq-6fx9-rvh9","summary":"CGA-fjpq-6fx9-rvh9","evidence":"osv:CGA-fjpq-6fx9-rvh9","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fjpq-6fx9-rvh9","aliases":["CGA-fjpq-6fx9-rvh9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fjpq-6fx9-rvh9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fjpq-6fx9-rvh9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:52Z"}]}}],"modified":"2026-10-02T18:28:00.472086446Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c39d2ba7-8117-4473-a508-cff79845d905","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fjpq-6fx9-rvh9","advisory_id":"c39d2ba7-8117-4473-a508-cff79845d905","event_types":["advisory"],"published_at":"2026-10-25T22:45:05.882964+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:57+00:00","detail_url":"/events/71308"},"members":[{"id":71308,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fjpq-6fx9-rvh9","summary":"CGA-fjpq-6fx9-rvh9","evidence":"osv:CGA-fjpq-6fx9-rvh9","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fjpq-6fx9-rvh9","aliases":["CGA-fjpq-6fx9-rvh9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fjpq-6fx9-rvh9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:52Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fjpq-6fx9-rvh9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:52Z"}]}}],"modified":"2026-10-02T18:28:00.472086446Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c39d2ba7-8117-4473-a508-cff79845d905","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fjpq-6fx9-rvh9","advisory_id":"c39d2ba7-8117-4473-a508-cff79845d905","event_types":["advisory"],"published_at":"2026-10-25T22:45:05.882964+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:57+00:00","detail_url":"/events/71308"}]}},{"id":70936,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fm4p-3m9w-xmpc","summary":"CGA-fm4p-3m9w-xmpc","evidence":"osv:CGA-fm4p-3m9w-xmpc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fm4p-3m9w-xmpc","aliases":["CGA-fm4p-3m9w-xmpc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:28:00.514037130Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm4p-3m9w-xmpc","advisory_id":"81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","event_types":["advisory"],"published_at":"2026-10-25T22:45:04.85729+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/advisories/advisory%3A81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","group":{"id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","revision":1,"primary_event_id":71307,"change":"published","superseded_by":[],"changed":{"id":71307,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fm4p-3m9w-xmpc","summary":"CGA-fm4p-3m9w-xmpc","evidence":"osv:CGA-fm4p-3m9w-xmpc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fm4p-3m9w-xmpc","aliases":["CGA-fm4p-3m9w-xmpc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:28:00.514037130Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm4p-3m9w-xmpc","advisory_id":"81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","event_types":["advisory"],"published_at":"2026-10-25T22:45:04.85729+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71307"},"members":[{"id":71307,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fm4p-3m9w-xmpc","summary":"CGA-fm4p-3m9w-xmpc","evidence":"osv:CGA-fm4p-3m9w-xmpc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fm4p-3m9w-xmpc","aliases":["CGA-fm4p-3m9w-xmpc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:28:00.514037130Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm4p-3m9w-xmpc","advisory_id":"81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","event_types":["advisory"],"published_at":"2026-10-25T22:45:04.85729+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71307"}]}},{"id":70935,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-74hc-rj64-x4xf","summary":"CGA-74hc-rj64-x4xf","evidence":"osv:CGA-74hc-rj64-x4xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-74hc-rj64-x4xf","aliases":["CGA-74hc-rj64-x4xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:57.851405855Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-74hc-rj64-x4xf","advisory_id":"30d920ae-71b0-4198-8e6b-e3d8245932b9","event_types":["advisory"],"published_at":"2026-10-25T22:45:03.853907+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:08+00:00","detail_url":"/advisories/advisory%3A30d920ae-71b0-4198-8e6b-e3d8245932b9","group":{"id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","revision":1,"primary_event_id":71306,"change":"published","superseded_by":[],"changed":{"id":71306,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-74hc-rj64-x4xf","summary":"CGA-74hc-rj64-x4xf","evidence":"osv:CGA-74hc-rj64-x4xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-74hc-rj64-x4xf","aliases":["CGA-74hc-rj64-x4xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:57.851405855Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-74hc-rj64-x4xf","advisory_id":"30d920ae-71b0-4198-8e6b-e3d8245932b9","event_types":["advisory"],"published_at":"2026-10-25T22:45:03.853907+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:08+00:00","detail_url":"/events/71306"},"members":[{"id":71306,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-74hc-rj64-x4xf","summary":"CGA-74hc-rj64-x4xf","evidence":"osv:CGA-74hc-rj64-x4xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-74hc-rj64-x4xf","aliases":["CGA-74hc-rj64-x4xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:57.851405855Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-74hc-rj64-x4xf","advisory_id":"30d920ae-71b0-4198-8e6b-e3d8245932b9","event_types":["advisory"],"published_at":"2026-10-25T22:45:03.853907+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:08+00:00","detail_url":"/events/71306"}]}},{"id":70931,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6jgq-24fh-j4gh","summary":"CGA-6jgq-24fh-j4gh","evidence":"osv:CGA-6jgq-24fh-j4gh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6jgq-24fh-j4gh","aliases":["CGA-6jgq-24fh-j4gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:59.720368460Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6jgq-24fh-j4gh","advisory_id":"738c2bfb-8ab5-4fea-ba16-8f40706c3714","event_types":["advisory"],"published_at":"2026-10-25T22:44:59.051546+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:25+00:00","detail_url":"/advisories/advisory%3A738c2bfb-8ab5-4fea-ba16-8f40706c3714","group":{"id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","revision":1,"primary_event_id":71302,"change":"published","superseded_by":[],"changed":{"id":71302,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6jgq-24fh-j4gh","summary":"CGA-6jgq-24fh-j4gh","evidence":"osv:CGA-6jgq-24fh-j4gh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6jgq-24fh-j4gh","aliases":["CGA-6jgq-24fh-j4gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:59.720368460Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6jgq-24fh-j4gh","advisory_id":"738c2bfb-8ab5-4fea-ba16-8f40706c3714","event_types":["advisory"],"published_at":"2026-10-25T22:44:59.051546+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:25+00:00","detail_url":"/events/71302"},"members":[{"id":71302,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6jgq-24fh-j4gh","summary":"CGA-6jgq-24fh-j4gh","evidence":"osv:CGA-6jgq-24fh-j4gh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6jgq-24fh-j4gh","aliases":["CGA-6jgq-24fh-j4gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:59.720368460Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6jgq-24fh-j4gh","advisory_id":"738c2bfb-8ab5-4fea-ba16-8f40706c3714","event_types":["advisory"],"published_at":"2026-10-25T22:44:59.051546+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:25+00:00","detail_url":"/events/71302"}]}},{"id":70929,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-5328-rfq5-59p9","summary":"CGA-5328-rfq5-59p9","evidence":"osv:CGA-5328-rfq5-59p9","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5328-rfq5-59p9","aliases":["CGA-5328-rfq5-59p9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:59.580546837Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5328-rfq5-59p9","advisory_id":"cdc33e12-06d6-40bc-9480-b758d7b4c10f","event_types":["advisory"],"published_at":"2026-10-25T22:44:52.901401+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:19+00:00","detail_url":"/advisories/advisory%3Acdc33e12-06d6-40bc-9480-b758d7b4c10f","group":{"id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","revision":1,"primary_event_id":71300,"change":"published","superseded_by":[],"changed":{"id":71300,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-5328-rfq5-59p9","summary":"CGA-5328-rfq5-59p9","evidence":"osv:CGA-5328-rfq5-59p9","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5328-rfq5-59p9","aliases":["CGA-5328-rfq5-59p9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:59.580546837Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5328-rfq5-59p9","advisory_id":"cdc33e12-06d6-40bc-9480-b758d7b4c10f","event_types":["advisory"],"published_at":"2026-10-25T22:44:52.901401+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:19+00:00","detail_url":"/events/71300"},"members":[{"id":71300,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-5328-rfq5-59p9","summary":"CGA-5328-rfq5-59p9","evidence":"osv:CGA-5328-rfq5-59p9","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5328-rfq5-59p9","aliases":["CGA-5328-rfq5-59p9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:59.580546837Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5328-rfq5-59p9","advisory_id":"cdc33e12-06d6-40bc-9480-b758d7b4c10f","event_types":["advisory"],"published_at":"2026-10-25T22:44:52.901401+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:19+00:00","detail_url":"/events/71300"}]}},{"id":70928,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-8x65-9wm6-79f2","summary":"CGA-8x65-9wm6-79f2","evidence":"osv:CGA-8x65-9wm6-79f2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8x65-9wm6-79f2","aliases":["CGA-8x65-9wm6-79f2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:59.546873350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8x65-9wm6-79f2","advisory_id":"072bd249-b42c-43be-8300-2b8c48f301ac","event_types":["advisory"],"published_at":"2026-10-25T22:44:51.970739+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:18+00:00","detail_url":"/advisories/advisory%3A072bd249-b42c-43be-8300-2b8c48f301ac","group":{"id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","revision":1,"primary_event_id":71299,"change":"published","superseded_by":[],"changed":{"id":71299,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-8x65-9wm6-79f2","summary":"CGA-8x65-9wm6-79f2","evidence":"osv:CGA-8x65-9wm6-79f2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8x65-9wm6-79f2","aliases":["CGA-8x65-9wm6-79f2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:59.546873350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8x65-9wm6-79f2","advisory_id":"072bd249-b42c-43be-8300-2b8c48f301ac","event_types":["advisory"],"published_at":"2026-10-25T22:44:51.970739+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:18+00:00","detail_url":"/events/71299"},"members":[{"id":71299,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-8x65-9wm6-79f2","summary":"CGA-8x65-9wm6-79f2","evidence":"osv:CGA-8x65-9wm6-79f2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8x65-9wm6-79f2","aliases":["CGA-8x65-9wm6-79f2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:59.546873350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8x65-9wm6-79f2","advisory_id":"072bd249-b42c-43be-8300-2b8c48f301ac","event_types":["advisory"],"published_at":"2026-10-25T22:44:51.970739+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:18+00:00","detail_url":"/events/71299"}]}},{"id":70925,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-pwhh-j7r7-r7xc","summary":"CGA-pwhh-j7r7-r7xc","evidence":"osv:CGA-pwhh-j7r7-r7xc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwhh-j7r7-r7xc","aliases":["CGA-pwhh-j7r7-r7xc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:58.438604672Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwhh-j7r7-r7xc","advisory_id":"8060bdd9-8780-4e0d-bc13-ef20a6b19de5","event_types":["advisory"],"published_at":"2026-10-25T22:44:44.717394+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/advisories/advisory%3A8060bdd9-8780-4e0d-bc13-ef20a6b19de5","group":{"id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","revision":1,"primary_event_id":71296,"change":"published","superseded_by":[],"changed":{"id":71296,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-pwhh-j7r7-r7xc","summary":"CGA-pwhh-j7r7-r7xc","evidence":"osv:CGA-pwhh-j7r7-r7xc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwhh-j7r7-r7xc","aliases":["CGA-pwhh-j7r7-r7xc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:58.438604672Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwhh-j7r7-r7xc","advisory_id":"8060bdd9-8780-4e0d-bc13-ef20a6b19de5","event_types":["advisory"],"published_at":"2026-10-25T22:44:44.717394+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71296"},"members":[{"id":71296,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-pwhh-j7r7-r7xc","summary":"CGA-pwhh-j7r7-r7xc","evidence":"osv:CGA-pwhh-j7r7-r7xc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwhh-j7r7-r7xc","aliases":["CGA-pwhh-j7r7-r7xc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:58.438604672Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwhh-j7r7-r7xc","advisory_id":"8060bdd9-8780-4e0d-bc13-ef20a6b19de5","event_types":["advisory"],"published_at":"2026-10-25T22:44:44.717394+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71296"}]}},{"id":70924,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6672-7mgx-2chp","summary":"CGA-6672-7mgx-2chp","evidence":"osv:CGA-6672-7mgx-2chp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6672-7mgx-2chp","aliases":["CGA-6672-7mgx-2chp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:58.232096678Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6672-7mgx-2chp","advisory_id":"e614a6af-b482-4ff6-98ae-ef574aed4fb5","event_types":["advisory"],"published_at":"2026-10-25T22:44:43.543845+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/advisories/advisory%3Ae614a6af-b482-4ff6-98ae-ef574aed4fb5","group":{"id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","revision":1,"primary_event_id":71295,"change":"published","superseded_by":[],"changed":{"id":71295,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6672-7mgx-2chp","summary":"CGA-6672-7mgx-2chp","evidence":"osv:CGA-6672-7mgx-2chp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6672-7mgx-2chp","aliases":["CGA-6672-7mgx-2chp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:58.232096678Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6672-7mgx-2chp","advisory_id":"e614a6af-b482-4ff6-98ae-ef574aed4fb5","event_types":["advisory"],"published_at":"2026-10-25T22:44:43.543845+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71295"},"members":[{"id":71295,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6672-7mgx-2chp","summary":"CGA-6672-7mgx-2chp","evidence":"osv:CGA-6672-7mgx-2chp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6672-7mgx-2chp","aliases":["CGA-6672-7mgx-2chp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:58.232096678Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6672-7mgx-2chp","advisory_id":"e614a6af-b482-4ff6-98ae-ef574aed4fb5","event_types":["advisory"],"published_at":"2026-10-25T22:44:43.543845+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71295"}]}},{"id":70922,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cw37-pp96-6m87","summary":"CGA-cw37-pp96-6m87","evidence":"osv:CGA-cw37-pp96-6m87","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cw37-pp96-6m87","aliases":["CGA-cw37-pp96-6m87"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:57.987538722Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw37-pp96-6m87","advisory_id":"c297e5b7-dfcc-442c-ae33-6778b02fd538","event_types":["advisory"],"published_at":"2026-10-25T22:44:41.620874+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:15+00:00","detail_url":"/advisories/advisory%3Ac297e5b7-dfcc-442c-ae33-6778b02fd538","group":{"id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","revision":1,"primary_event_id":71293,"change":"published","superseded_by":[],"changed":{"id":71293,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cw37-pp96-6m87","summary":"CGA-cw37-pp96-6m87","evidence":"osv:CGA-cw37-pp96-6m87","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cw37-pp96-6m87","aliases":["CGA-cw37-pp96-6m87"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:57.987538722Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw37-pp96-6m87","advisory_id":"c297e5b7-dfcc-442c-ae33-6778b02fd538","event_types":["advisory"],"published_at":"2026-10-25T22:44:41.620874+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:15+00:00","detail_url":"/events/71293"},"members":[{"id":71293,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cw37-pp96-6m87","summary":"CGA-cw37-pp96-6m87","evidence":"osv:CGA-cw37-pp96-6m87","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cw37-pp96-6m87","aliases":["CGA-cw37-pp96-6m87"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:57.987538722Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw37-pp96-6m87","advisory_id":"c297e5b7-dfcc-442c-ae33-6778b02fd538","event_types":["advisory"],"published_at":"2026-10-25T22:44:41.620874+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:15+00:00","detail_url":"/events/71293"}]}},{"id":70920,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-442h-87fg-pc9w","summary":"CGA-442h-87fg-pc9w","evidence":"osv:CGA-442h-87fg-pc9w","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-442h-87fg-pc9w","aliases":["CGA-442h-87fg-pc9w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:57.255622821Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-442h-87fg-pc9w","advisory_id":"1be6735f-4eaf-4725-8800-b3283f4b53de","event_types":["advisory"],"published_at":"2026-10-25T22:44:38.53962+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/advisories/advisory%3A1be6735f-4eaf-4725-8800-b3283f4b53de","group":{"id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","revision":1,"primary_event_id":71291,"change":"published","superseded_by":[],"changed":{"id":71291,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-442h-87fg-pc9w","summary":"CGA-442h-87fg-pc9w","evidence":"osv:CGA-442h-87fg-pc9w","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-442h-87fg-pc9w","aliases":["CGA-442h-87fg-pc9w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:57.255622821Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-442h-87fg-pc9w","advisory_id":"1be6735f-4eaf-4725-8800-b3283f4b53de","event_types":["advisory"],"published_at":"2026-10-25T22:44:38.53962+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71291"},"members":[{"id":71291,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-442h-87fg-pc9w","summary":"CGA-442h-87fg-pc9w","evidence":"osv:CGA-442h-87fg-pc9w","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-442h-87fg-pc9w","aliases":["CGA-442h-87fg-pc9w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:57.255622821Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-442h-87fg-pc9w","advisory_id":"1be6735f-4eaf-4725-8800-b3283f4b53de","event_types":["advisory"],"published_at":"2026-10-25T22:44:38.53962+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71291"}]}},{"id":70919,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-366c-3fqr-j7fp","summary":"CGA-366c-3fqr-j7fp","evidence":"osv:CGA-366c-3fqr-j7fp","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-366c-3fqr-j7fp","aliases":["CGA-366c-3fqr-j7fp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-366c-3fqr-j7fp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-366c-3fqr-j7fp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}}],"modified":"2026-10-02T18:27:56.168472275Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e8c0f382-abd7-4f35-be94-34e5273491bf","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-366c-3fqr-j7fp","advisory_id":"e8c0f382-abd7-4f35-be94-34e5273491bf","event_types":["advisory"],"published_at":"2026-10-25T22:44:37.183633+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:58+00:00","detail_url":"/advisories/advisory%3Ae8c0f382-abd7-4f35-be94-34e5273491bf","group":{"id":"advisory:e8c0f382-abd7-4f35-be94-34e5273491bf","revision":1,"primary_event_id":71290,"change":"published","superseded_by":[],"changed":{"id":71290,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-366c-3fqr-j7fp","summary":"CGA-366c-3fqr-j7fp","evidence":"osv:CGA-366c-3fqr-j7fp","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-366c-3fqr-j7fp","aliases":["CGA-366c-3fqr-j7fp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-366c-3fqr-j7fp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-366c-3fqr-j7fp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}}],"modified":"2026-10-02T18:27:56.168472275Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e8c0f382-abd7-4f35-be94-34e5273491bf","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-366c-3fqr-j7fp","advisory_id":"e8c0f382-abd7-4f35-be94-34e5273491bf","event_types":["advisory"],"published_at":"2026-10-25T22:44:37.183633+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:58+00:00","detail_url":"/events/71290"},"members":[{"id":71290,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-366c-3fqr-j7fp","summary":"CGA-366c-3fqr-j7fp","evidence":"osv:CGA-366c-3fqr-j7fp","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-366c-3fqr-j7fp","aliases":["CGA-366c-3fqr-j7fp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-366c-3fqr-j7fp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-366c-3fqr-j7fp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}}],"modified":"2026-10-02T18:27:56.168472275Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e8c0f382-abd7-4f35-be94-34e5273491bf","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-366c-3fqr-j7fp","advisory_id":"e8c0f382-abd7-4f35-be94-34e5273491bf","event_types":["advisory"],"published_at":"2026-10-25T22:44:37.183633+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:58+00:00","detail_url":"/events/71290"}]}},{"id":70915,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-wm8p-66v8-hpx7","summary":"CGA-wm8p-66v8-hpx7","evidence":"osv:CGA-wm8p-66v8-hpx7","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wm8p-66v8-hpx7","aliases":["CGA-wm8p-66v8-hpx7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm8p-66v8-hpx7.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:25Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm8p-66v8-hpx7.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:25Z"}]}}],"modified":"2026-10-02T18:27:54.978985676Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b1c814ee-d579-4b66-9e4b-c4aefc784405","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wm8p-66v8-hpx7","advisory_id":"b1c814ee-d579-4b66-9e4b-c4aefc784405","event_types":["advisory"],"published_at":"2026-10-25T22:44:32.864542+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:55+00:00","detail_url":"/advisories/advisory%3Ab1c814ee-d579-4b66-9e4b-c4aefc784405","group":{"id":"advisory:b1c814ee-d579-4b66-9e4b-c4aefc784405","revision":1,"primary_event_id":71286,"change":"published","superseded_by":[],"changed":{"id":71286,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-wm8p-66v8-hpx7","summary":"CGA-wm8p-66v8-hpx7","evidence":"osv:CGA-wm8p-66v8-hpx7","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wm8p-66v8-hpx7","aliases":["CGA-wm8p-66v8-hpx7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm8p-66v8-hpx7.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:25Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm8p-66v8-hpx7.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:25Z"}]}}],"modified":"2026-10-02T18:27:54.978985676Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b1c814ee-d579-4b66-9e4b-c4aefc784405","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wm8p-66v8-hpx7","advisory_id":"b1c814ee-d579-4b66-9e4b-c4aefc784405","event_types":["advisory"],"published_at":"2026-10-25T22:44:32.864542+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:55+00:00","detail_url":"/events/71286"},"members":[{"id":71286,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-wm8p-66v8-hpx7","summary":"CGA-wm8p-66v8-hpx7","evidence":"osv:CGA-wm8p-66v8-hpx7","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-wm8p-66v8-hpx7","aliases":["CGA-wm8p-66v8-hpx7"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm8p-66v8-hpx7.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:25Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-wm8p-66v8-hpx7.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:25Z"}]}}],"modified":"2026-10-02T18:27:54.978985676Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b1c814ee-d579-4b66-9e4b-c4aefc784405","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-wm8p-66v8-hpx7","advisory_id":"b1c814ee-d579-4b66-9e4b-c4aefc784405","event_types":["advisory"],"published_at":"2026-10-25T22:44:32.864542+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:55+00:00","detail_url":"/events/71286"}]}},{"id":70914,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-3hxc-6jw5-cpff","summary":"CGA-3hxc-6jw5-cpff","evidence":"osv:CGA-3hxc-6jw5-cpff","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3hxc-6jw5-cpff","aliases":["CGA-3hxc-6jw5-cpff"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:27:54.905949274Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3hxc-6jw5-cpff","advisory_id":"1432ad35-aad3-4f9e-9ef1-a86ed7915431","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.936836+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/advisories/advisory%3A1432ad35-aad3-4f9e-9ef1-a86ed7915431","group":{"id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","revision":1,"primary_event_id":71285,"change":"published","superseded_by":[],"changed":{"id":71285,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-3hxc-6jw5-cpff","summary":"CGA-3hxc-6jw5-cpff","evidence":"osv:CGA-3hxc-6jw5-cpff","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3hxc-6jw5-cpff","aliases":["CGA-3hxc-6jw5-cpff"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:27:54.905949274Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3hxc-6jw5-cpff","advisory_id":"1432ad35-aad3-4f9e-9ef1-a86ed7915431","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.936836+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71285"},"members":[{"id":71285,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-3hxc-6jw5-cpff","summary":"CGA-3hxc-6jw5-cpff","evidence":"osv:CGA-3hxc-6jw5-cpff","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3hxc-6jw5-cpff","aliases":["CGA-3hxc-6jw5-cpff"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:27:54.905949274Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3hxc-6jw5-cpff","advisory_id":"1432ad35-aad3-4f9e-9ef1-a86ed7915431","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.936836+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71285"}]}},{"id":70913,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jr6v-8fg9-9wgh","summary":"CGA-jr6v-8fg9-9wgh","evidence":"osv:CGA-jr6v-8fg9-9wgh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jr6v-8fg9-9wgh","aliases":["CGA-jr6v-8fg9-9wgh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:54.759769955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jr6v-8fg9-9wgh","advisory_id":"b591b78e-64a0-4881-9461-56d4c6147d40","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.087555+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/advisories/advisory%3Ab591b78e-64a0-4881-9461-56d4c6147d40","group":{"id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","revision":1,"primary_event_id":71284,"change":"published","superseded_by":[],"changed":{"id":71284,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jr6v-8fg9-9wgh","summary":"CGA-jr6v-8fg9-9wgh","evidence":"osv:CGA-jr6v-8fg9-9wgh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jr6v-8fg9-9wgh","aliases":["CGA-jr6v-8fg9-9wgh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:54.759769955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jr6v-8fg9-9wgh","advisory_id":"b591b78e-64a0-4881-9461-56d4c6147d40","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.087555+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71284"},"members":[{"id":71284,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jr6v-8fg9-9wgh","summary":"CGA-jr6v-8fg9-9wgh","evidence":"osv:CGA-jr6v-8fg9-9wgh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jr6v-8fg9-9wgh","aliases":["CGA-jr6v-8fg9-9wgh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:54.759769955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jr6v-8fg9-9wgh","advisory_id":"b591b78e-64a0-4881-9461-56d4c6147d40","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.087555+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71284"}]}},{"id":70910,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-grrr-2fgc-fxp8","summary":"CGA-grrr-2fgc-fxp8","evidence":"osv:CGA-grrr-2fgc-fxp8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-grrr-2fgc-fxp8","aliases":["CGA-grrr-2fgc-fxp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:54.069809644Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grrr-2fgc-fxp8","advisory_id":"5a128239-7893-42cb-b2ee-d240c53e8c89","event_types":["advisory"],"published_at":"2026-10-25T22:44:24.783219+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:14+00:00","detail_url":"/advisories/advisory%3A5a128239-7893-42cb-b2ee-d240c53e8c89","group":{"id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","revision":1,"primary_event_id":71281,"change":"published","superseded_by":[],"changed":{"id":71281,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-grrr-2fgc-fxp8","summary":"CGA-grrr-2fgc-fxp8","evidence":"osv:CGA-grrr-2fgc-fxp8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-grrr-2fgc-fxp8","aliases":["CGA-grrr-2fgc-fxp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:54.069809644Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grrr-2fgc-fxp8","advisory_id":"5a128239-7893-42cb-b2ee-d240c53e8c89","event_types":["advisory"],"published_at":"2026-10-25T22:44:24.783219+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:14+00:00","detail_url":"/events/71281"},"members":[{"id":71281,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-grrr-2fgc-fxp8","summary":"CGA-grrr-2fgc-fxp8","evidence":"osv:CGA-grrr-2fgc-fxp8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-grrr-2fgc-fxp8","aliases":["CGA-grrr-2fgc-fxp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:54.069809644Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grrr-2fgc-fxp8","advisory_id":"5a128239-7893-42cb-b2ee-d240c53e8c89","event_types":["advisory"],"published_at":"2026-10-25T22:44:24.783219+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:14+00:00","detail_url":"/events/71281"}]}},{"id":70909,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hj4g-ccq3-qcmp","summary":"CGA-hj4g-ccq3-qcmp","evidence":"osv:CGA-hj4g-ccq3-qcmp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hj4g-ccq3-qcmp","aliases":["CGA-hj4g-ccq3-qcmp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:54.111151727Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hj4g-ccq3-qcmp","advisory_id":"c6b5a5e9-a171-42e4-99f0-8ab55143aabc","event_types":["advisory"],"published_at":"2026-10-25T22:44:23.938202+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/advisories/advisory%3Ac6b5a5e9-a171-42e4-99f0-8ab55143aabc","group":{"id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","revision":1,"primary_event_id":71280,"change":"published","superseded_by":[],"changed":{"id":71280,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hj4g-ccq3-qcmp","summary":"CGA-hj4g-ccq3-qcmp","evidence":"osv:CGA-hj4g-ccq3-qcmp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hj4g-ccq3-qcmp","aliases":["CGA-hj4g-ccq3-qcmp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:54.111151727Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hj4g-ccq3-qcmp","advisory_id":"c6b5a5e9-a171-42e4-99f0-8ab55143aabc","event_types":["advisory"],"published_at":"2026-10-25T22:44:23.938202+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71280"},"members":[{"id":71280,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hj4g-ccq3-qcmp","summary":"CGA-hj4g-ccq3-qcmp","evidence":"osv:CGA-hj4g-ccq3-qcmp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hj4g-ccq3-qcmp","aliases":["CGA-hj4g-ccq3-qcmp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:54.111151727Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hj4g-ccq3-qcmp","advisory_id":"c6b5a5e9-a171-42e4-99f0-8ab55143aabc","event_types":["advisory"],"published_at":"2026-10-25T22:44:23.938202+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71280"}]}},{"id":70907,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jvqv-88hv-8hh3","summary":"CGA-jvqv-88hv-8hh3","evidence":"osv:CGA-jvqv-88hv-8hh3","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jvqv-88hv-8hh3","aliases":["CGA-jvqv-88hv-8hh3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:53.845173337Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jvqv-88hv-8hh3","advisory_id":"e704db01-963c-4773-8767-70cca45aab8b","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.959235+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/advisories/advisory%3Ae704db01-963c-4773-8767-70cca45aab8b","group":{"id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","revision":1,"primary_event_id":71278,"change":"published","superseded_by":[],"changed":{"id":71278,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jvqv-88hv-8hh3","summary":"CGA-jvqv-88hv-8hh3","evidence":"osv:CGA-jvqv-88hv-8hh3","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jvqv-88hv-8hh3","aliases":["CGA-jvqv-88hv-8hh3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:53.845173337Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jvqv-88hv-8hh3","advisory_id":"e704db01-963c-4773-8767-70cca45aab8b","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.959235+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71278"},"members":[{"id":71278,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jvqv-88hv-8hh3","summary":"CGA-jvqv-88hv-8hh3","evidence":"osv:CGA-jvqv-88hv-8hh3","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jvqv-88hv-8hh3","aliases":["CGA-jvqv-88hv-8hh3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:53.845173337Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jvqv-88hv-8hh3","advisory_id":"e704db01-963c-4773-8767-70cca45aab8b","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.959235+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71278"}]}},{"id":70901,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cvqv-89pg-hm8m","summary":"CGA-cvqv-89pg-hm8m","evidence":"osv:CGA-cvqv-89pg-hm8m","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cvqv-89pg-hm8m","aliases":["CGA-cvqv-89pg-hm8m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cvqv-89pg-hm8m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cvqv-89pg-hm8m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:27:53.017682603Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cvqv-89pg-hm8m","advisory_id":"d9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","event_types":["advisory"],"published_at":"2026-10-25T22:44:19.037232+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:54+00:00","detail_url":"/advisories/advisory%3Ad9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","group":{"id":"advisory:d9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","revision":1,"primary_event_id":71272,"change":"published","superseded_by":[],"changed":{"id":71272,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cvqv-89pg-hm8m","summary":"CGA-cvqv-89pg-hm8m","evidence":"osv:CGA-cvqv-89pg-hm8m","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cvqv-89pg-hm8m","aliases":["CGA-cvqv-89pg-hm8m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cvqv-89pg-hm8m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cvqv-89pg-hm8m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:27:53.017682603Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cvqv-89pg-hm8m","advisory_id":"d9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","event_types":["advisory"],"published_at":"2026-10-25T22:44:19.037232+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:54+00:00","detail_url":"/events/71272"},"members":[{"id":71272,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cvqv-89pg-hm8m","summary":"CGA-cvqv-89pg-hm8m","evidence":"osv:CGA-cvqv-89pg-hm8m","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cvqv-89pg-hm8m","aliases":["CGA-cvqv-89pg-hm8m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cvqv-89pg-hm8m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cvqv-89pg-hm8m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:27:53.017682603Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:d9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cvqv-89pg-hm8m","advisory_id":"d9a06cf5-1247-447b-bf7d-d5a0d9d94b2f","event_types":["advisory"],"published_at":"2026-10-25T22:44:19.037232+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:54+00:00","detail_url":"/events/71272"}]}},{"id":70898,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hfvw-8x32-38cp","summary":"CGA-hfvw-8x32-38cp","evidence":"osv:CGA-hfvw-8x32-38cp","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hfvw-8x32-38cp","aliases":["CGA-hfvw-8x32-38cp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hfvw-8x32-38cp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/mysqlctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hfvw-8x32-38cp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/mysqlctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}}],"modified":"2026-10-02T18:27:52.325915729Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81aebb2d-f579-4a26-8d1e-3eec3b853350","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hfvw-8x32-38cp","advisory_id":"81aebb2d-f579-4a26-8d1e-3eec3b853350","event_types":["advisory"],"published_at":"2026-10-25T22:44:12.249472+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:57+00:00","detail_url":"/advisories/advisory%3A81aebb2d-f579-4a26-8d1e-3eec3b853350","group":{"id":"advisory:81aebb2d-f579-4a26-8d1e-3eec3b853350","revision":1,"primary_event_id":71269,"change":"published","superseded_by":[],"changed":{"id":71269,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hfvw-8x32-38cp","summary":"CGA-hfvw-8x32-38cp","evidence":"osv:CGA-hfvw-8x32-38cp","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hfvw-8x32-38cp","aliases":["CGA-hfvw-8x32-38cp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hfvw-8x32-38cp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/mysqlctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hfvw-8x32-38cp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/mysqlctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}}],"modified":"2026-10-02T18:27:52.325915729Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81aebb2d-f579-4a26-8d1e-3eec3b853350","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hfvw-8x32-38cp","advisory_id":"81aebb2d-f579-4a26-8d1e-3eec3b853350","event_types":["advisory"],"published_at":"2026-10-25T22:44:12.249472+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:57+00:00","detail_url":"/events/71269"},"members":[{"id":71269,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hfvw-8x32-38cp","summary":"CGA-hfvw-8x32-38cp","evidence":"osv:CGA-hfvw-8x32-38cp","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hfvw-8x32-38cp","aliases":["CGA-hfvw-8x32-38cp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hfvw-8x32-38cp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/mysqlctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hfvw-8x32-38cp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/mysqlctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:23:53Z"}]}}],"modified":"2026-10-02T18:27:52.325915729Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81aebb2d-f579-4a26-8d1e-3eec3b853350","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hfvw-8x32-38cp","advisory_id":"81aebb2d-f579-4a26-8d1e-3eec3b853350","event_types":["advisory"],"published_at":"2026-10-25T22:44:12.249472+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:33:57+00:00","detail_url":"/events/71269"}]}},{"id":70897,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-m5v9-8jcq-w6vg","summary":"CGA-m5v9-8jcq-w6vg","evidence":"osv:CGA-m5v9-8jcq-w6vg","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m5v9-8jcq-w6vg","aliases":["CGA-m5v9-8jcq-w6vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:52.276772153Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m5v9-8jcq-w6vg","advisory_id":"52427d1c-cec5-4a2d-abde-5b2041ab636e","event_types":["advisory"],"published_at":"2026-10-25T22:44:11.396293+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/advisories/advisory%3A52427d1c-cec5-4a2d-abde-5b2041ab636e","group":{"id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","revision":1,"primary_event_id":71268,"change":"published","superseded_by":[],"changed":{"id":71268,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-m5v9-8jcq-w6vg","summary":"CGA-m5v9-8jcq-w6vg","evidence":"osv:CGA-m5v9-8jcq-w6vg","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m5v9-8jcq-w6vg","aliases":["CGA-m5v9-8jcq-w6vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:52.276772153Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m5v9-8jcq-w6vg","advisory_id":"52427d1c-cec5-4a2d-abde-5b2041ab636e","event_types":["advisory"],"published_at":"2026-10-25T22:44:11.396293+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71268"},"members":[{"id":71268,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-m5v9-8jcq-w6vg","summary":"CGA-m5v9-8jcq-w6vg","evidence":"osv:CGA-m5v9-8jcq-w6vg","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m5v9-8jcq-w6vg","aliases":["CGA-m5v9-8jcq-w6vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:52.276772153Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m5v9-8jcq-w6vg","advisory_id":"52427d1c-cec5-4a2d-abde-5b2041ab636e","event_types":["advisory"],"published_at":"2026-10-25T22:44:11.396293+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71268"}]}},{"id":70896,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-48q8-v4fc-7c64","summary":"CGA-48q8-v4fc-7c64","evidence":"osv:CGA-48q8-v4fc-7c64","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-48q8-v4fc-7c64","aliases":["CGA-48q8-v4fc-7c64"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:52.123421015Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48q8-v4fc-7c64","advisory_id":"3e9189b6-6d7e-4005-ae84-45a46cfb616d","event_types":["advisory"],"published_at":"2026-10-25T22:44:10.566154+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:22+00:00","detail_url":"/advisories/advisory%3A3e9189b6-6d7e-4005-ae84-45a46cfb616d","group":{"id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","revision":1,"primary_event_id":71267,"change":"published","superseded_by":[],"changed":{"id":71267,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-48q8-v4fc-7c64","summary":"CGA-48q8-v4fc-7c64","evidence":"osv:CGA-48q8-v4fc-7c64","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-48q8-v4fc-7c64","aliases":["CGA-48q8-v4fc-7c64"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:52.123421015Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48q8-v4fc-7c64","advisory_id":"3e9189b6-6d7e-4005-ae84-45a46cfb616d","event_types":["advisory"],"published_at":"2026-10-25T22:44:10.566154+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:22+00:00","detail_url":"/events/71267"},"members":[{"id":71267,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-48q8-v4fc-7c64","summary":"CGA-48q8-v4fc-7c64","evidence":"osv:CGA-48q8-v4fc-7c64","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-48q8-v4fc-7c64","aliases":["CGA-48q8-v4fc-7c64"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:52.123421015Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48q8-v4fc-7c64","advisory_id":"3e9189b6-6d7e-4005-ae84-45a46cfb616d","event_types":["advisory"],"published_at":"2026-10-25T22:44:10.566154+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:22+00:00","detail_url":"/events/71267"}]}},{"id":70893,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-g5pf-frmr-wp9m","summary":"CGA-g5pf-frmr-wp9m","evidence":"osv:CGA-g5pf-frmr-wp9m","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-g5pf-frmr-wp9m","aliases":["CGA-g5pf-frmr-wp9m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g5pf-frmr-wp9m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g5pf-frmr-wp9m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:27:51.390358416Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a8ce728b-8d5f-42c5-bd94-114f9af13bf3","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g5pf-frmr-wp9m","advisory_id":"a8ce728b-8d5f-42c5-bd94-114f9af13bf3","event_types":["advisory"],"published_at":"2026-10-25T22:44:07.055329+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:52+00:00","detail_url":"/advisories/advisory%3Aa8ce728b-8d5f-42c5-bd94-114f9af13bf3","group":{"id":"advisory:a8ce728b-8d5f-42c5-bd94-114f9af13bf3","revision":1,"primary_event_id":71264,"change":"published","superseded_by":[],"changed":{"id":71264,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-g5pf-frmr-wp9m","summary":"CGA-g5pf-frmr-wp9m","evidence":"osv:CGA-g5pf-frmr-wp9m","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-g5pf-frmr-wp9m","aliases":["CGA-g5pf-frmr-wp9m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g5pf-frmr-wp9m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g5pf-frmr-wp9m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:27:51.390358416Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a8ce728b-8d5f-42c5-bd94-114f9af13bf3","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g5pf-frmr-wp9m","advisory_id":"a8ce728b-8d5f-42c5-bd94-114f9af13bf3","event_types":["advisory"],"published_at":"2026-10-25T22:44:07.055329+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:52+00:00","detail_url":"/events/71264"},"members":[{"id":71264,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-g5pf-frmr-wp9m","summary":"CGA-g5pf-frmr-wp9m","evidence":"osv:CGA-g5pf-frmr-wp9m","products":[{"name":{"value":"vitess-23","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-g5pf-frmr-wp9m","aliases":["CGA-g5pf-frmr-wp9m"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/chainguard/vitess-23?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g5pf-frmr-wp9m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23","purl":"pkg:apk/wolfi/vitess-23?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-g5pf-frmr-wp9m.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:35:26Z"}]}}],"modified":"2026-10-02T18:27:51.390358416Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:a8ce728b-8d5f-42c5-bd94-114f9af13bf3","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-g5pf-frmr-wp9m","advisory_id":"a8ce728b-8d5f-42c5-bd94-114f9af13bf3","event_types":["advisory"],"published_at":"2026-10-25T22:44:07.055329+00:00","technologies":["core-osv","vitess-23"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:21:52+00:00","detail_url":"/events/71264"}]}},{"id":70890,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-q9fw-3jp8-4w9r","summary":"CGA-q9fw-3jp8-4w9r","evidence":"osv:CGA-q9fw-3jp8-4w9r","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q9fw-3jp8-4w9r","aliases":["CGA-q9fw-3jp8-4w9r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:49.234536577Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q9fw-3jp8-4w9r","advisory_id":"96a02f6e-ddf6-40bd-ab35-7f4bb3564840","event_types":["advisory"],"published_at":"2026-10-25T22:44:04.207364+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/advisories/advisory%3A96a02f6e-ddf6-40bd-ab35-7f4bb3564840","group":{"id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","revision":1,"primary_event_id":71261,"change":"published","superseded_by":[],"changed":{"id":71261,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-q9fw-3jp8-4w9r","summary":"CGA-q9fw-3jp8-4w9r","evidence":"osv:CGA-q9fw-3jp8-4w9r","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q9fw-3jp8-4w9r","aliases":["CGA-q9fw-3jp8-4w9r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:49.234536577Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q9fw-3jp8-4w9r","advisory_id":"96a02f6e-ddf6-40bd-ab35-7f4bb3564840","event_types":["advisory"],"published_at":"2026-10-25T22:44:04.207364+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71261"},"members":[{"id":71261,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-q9fw-3jp8-4w9r","summary":"CGA-q9fw-3jp8-4w9r","evidence":"osv:CGA-q9fw-3jp8-4w9r","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q9fw-3jp8-4w9r","aliases":["CGA-q9fw-3jp8-4w9r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:49.234536577Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q9fw-3jp8-4w9r","advisory_id":"96a02f6e-ddf6-40bd-ab35-7f4bb3564840","event_types":["advisory"],"published_at":"2026-10-25T22:44:04.207364+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71261"}]}},{"id":70883,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cqjc-pmmg-mgp2","summary":"CGA-cqjc-pmmg-mgp2","evidence":"osv:CGA-cqjc-pmmg-mgp2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cqjc-pmmg-mgp2","aliases":["CGA-cqjc-pmmg-mgp2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:48.113547970Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cqjc-pmmg-mgp2","advisory_id":"10da411d-383c-4fad-9fc8-af85a52e588e","event_types":["advisory"],"published_at":"2026-10-25T22:43:53.554591+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:12+00:00","detail_url":"/advisories/advisory%3A10da411d-383c-4fad-9fc8-af85a52e588e","group":{"id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","revision":1,"primary_event_id":71254,"change":"published","superseded_by":[],"changed":{"id":71254,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cqjc-pmmg-mgp2","summary":"CGA-cqjc-pmmg-mgp2","evidence":"osv:CGA-cqjc-pmmg-mgp2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cqjc-pmmg-mgp2","aliases":["CGA-cqjc-pmmg-mgp2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:48.113547970Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cqjc-pmmg-mgp2","advisory_id":"10da411d-383c-4fad-9fc8-af85a52e588e","event_types":["advisory"],"published_at":"2026-10-25T22:43:53.554591+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:12+00:00","detail_url":"/events/71254"},"members":[{"id":71254,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cqjc-pmmg-mgp2","summary":"CGA-cqjc-pmmg-mgp2","evidence":"osv:CGA-cqjc-pmmg-mgp2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cqjc-pmmg-mgp2","aliases":["CGA-cqjc-pmmg-mgp2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:48.113547970Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cqjc-pmmg-mgp2","advisory_id":"10da411d-383c-4fad-9fc8-af85a52e588e","event_types":["advisory"],"published_at":"2026-10-25T22:43:53.554591+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:12+00:00","detail_url":"/events/71254"}]}}],"next_after":70953,"next_before":70883}