{"schema_version":"2","view":"grouped","data":[{"id":70953,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-c7pc-v2v2-5895","summary":"CGA-c7pc-v2v2-5895","evidence":"osv:CGA-c7pc-v2v2-5895","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7pc-v2v2-5895","aliases":["CGA-c7pc-v2v2-5895"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:28:03.766222586Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7pc-v2v2-5895","advisory_id":"164f1709-4e34-499e-911f-79d6d6b1a95b","event_types":["advisory"],"published_at":"2026-10-25T22:45:27.364942+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:16+00:00","detail_url":"/advisories/advisory%3A164f1709-4e34-499e-911f-79d6d6b1a95b","group":{"id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","revision":1,"primary_event_id":71324,"change":"published","superseded_by":[],"changed":{"id":71324,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-c7pc-v2v2-5895","summary":"CGA-c7pc-v2v2-5895","evidence":"osv:CGA-c7pc-v2v2-5895","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7pc-v2v2-5895","aliases":["CGA-c7pc-v2v2-5895"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:28:03.766222586Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7pc-v2v2-5895","advisory_id":"164f1709-4e34-499e-911f-79d6d6b1a95b","event_types":["advisory"],"published_at":"2026-10-25T22:45:27.364942+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:16+00:00","detail_url":"/events/71324"},"members":[{"id":71324,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-c7pc-v2v2-5895","summary":"CGA-c7pc-v2v2-5895","evidence":"osv:CGA-c7pc-v2v2-5895","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-c7pc-v2v2-5895","aliases":["CGA-c7pc-v2v2-5895"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-c7pc-v2v2-5895.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:28:03.766222586Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:164f1709-4e34-499e-911f-79d6d6b1a95b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-c7pc-v2v2-5895","advisory_id":"164f1709-4e34-499e-911f-79d6d6b1a95b","event_types":["advisory"],"published_at":"2026-10-25T22:45:27.364942+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:16+00:00","detail_url":"/events/71324"}]}},{"id":70952,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6538-xmp7-2rmw","summary":"CGA-6538-xmp7-2rmw","evidence":"osv:CGA-6538-xmp7-2rmw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6538-xmp7-2rmw","aliases":["CGA-6538-xmp7-2rmw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:03.709111778Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6538-xmp7-2rmw","advisory_id":"8b78dfee-6fd6-4726-beea-03c2cc58623d","event_types":["advisory"],"published_at":"2026-10-25T22:45:25.98295+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/advisories/advisory%3A8b78dfee-6fd6-4726-beea-03c2cc58623d","group":{"id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","revision":1,"primary_event_id":71323,"change":"published","superseded_by":[],"changed":{"id":71323,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6538-xmp7-2rmw","summary":"CGA-6538-xmp7-2rmw","evidence":"osv:CGA-6538-xmp7-2rmw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6538-xmp7-2rmw","aliases":["CGA-6538-xmp7-2rmw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:03.709111778Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6538-xmp7-2rmw","advisory_id":"8b78dfee-6fd6-4726-beea-03c2cc58623d","event_types":["advisory"],"published_at":"2026-10-25T22:45:25.98295+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71323"},"members":[{"id":71323,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6538-xmp7-2rmw","summary":"CGA-6538-xmp7-2rmw","evidence":"osv:CGA-6538-xmp7-2rmw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6538-xmp7-2rmw","aliases":["CGA-6538-xmp7-2rmw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6538-xmp7-2rmw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/codegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:03.709111778Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8b78dfee-6fd6-4726-beea-03c2cc58623d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6538-xmp7-2rmw","advisory_id":"8b78dfee-6fd6-4726-beea-03c2cc58623d","event_types":["advisory"],"published_at":"2026-10-25T22:45:25.98295+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71323"}]}},{"id":70951,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-978j-cwv3-4c96","summary":"CGA-978j-cwv3-4c96","evidence":"osv:CGA-978j-cwv3-4c96","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-978j-cwv3-4c96","aliases":["CGA-978j-cwv3-4c96"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:03.417746620Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-978j-cwv3-4c96","advisory_id":"7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.940718+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:20+00:00","detail_url":"/advisories/advisory%3A7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","group":{"id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","revision":1,"primary_event_id":71322,"change":"published","superseded_by":[],"changed":{"id":71322,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-978j-cwv3-4c96","summary":"CGA-978j-cwv3-4c96","evidence":"osv:CGA-978j-cwv3-4c96","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-978j-cwv3-4c96","aliases":["CGA-978j-cwv3-4c96"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:03.417746620Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-978j-cwv3-4c96","advisory_id":"7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.940718+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:20+00:00","detail_url":"/events/71322"},"members":[{"id":71322,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-978j-cwv3-4c96","summary":"CGA-978j-cwv3-4c96","evidence":"osv:CGA-978j-cwv3-4c96","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-978j-cwv3-4c96","aliases":["CGA-978j-cwv3-4c96"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-978j-cwv3-4c96.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vterrorsgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:03.417746620Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-978j-cwv3-4c96","advisory_id":"7cbc9ab2-1bea-4b6e-a6c2-b3dc42e23dc0","event_types":["advisory"],"published_at":"2026-10-25T22:45:24.940718+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:20+00:00","detail_url":"/events/71322"}]}},{"id":70945,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-rmx6-9jrr-cqj2","summary":"CGA-rmx6-9jrr-cqj2","evidence":"osv:CGA-rmx6-9jrr-cqj2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmx6-9jrr-cqj2","aliases":["CGA-rmx6-9jrr-cqj2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:02.396389955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmx6-9jrr-cqj2","advisory_id":"7fda528d-8c03-4a7e-8bbd-e340c6ff057d","event_types":["advisory"],"published_at":"2026-10-25T22:45:13.825644+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/advisories/advisory%3A7fda528d-8c03-4a7e-8bbd-e340c6ff057d","group":{"id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","revision":1,"primary_event_id":71316,"change":"published","superseded_by":[],"changed":{"id":71316,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-rmx6-9jrr-cqj2","summary":"CGA-rmx6-9jrr-cqj2","evidence":"osv:CGA-rmx6-9jrr-cqj2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmx6-9jrr-cqj2","aliases":["CGA-rmx6-9jrr-cqj2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:02.396389955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmx6-9jrr-cqj2","advisory_id":"7fda528d-8c03-4a7e-8bbd-e340c6ff057d","event_types":["advisory"],"published_at":"2026-10-25T22:45:13.825644+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71316"},"members":[{"id":71316,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-rmx6-9jrr-cqj2","summary":"CGA-rmx6-9jrr-cqj2","evidence":"osv:CGA-rmx6-9jrr-cqj2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-rmx6-9jrr-cqj2","aliases":["CGA-rmx6-9jrr-cqj2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-rmx6-9jrr-cqj2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgate","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:28:02.396389955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7fda528d-8c03-4a7e-8bbd-e340c6ff057d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-rmx6-9jrr-cqj2","advisory_id":"7fda528d-8c03-4a7e-8bbd-e340c6ff057d","event_types":["advisory"],"published_at":"2026-10-25T22:45:13.825644+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71316"}]}},{"id":70942,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-h2pp-w2x6-h9xf","summary":"CGA-h2pp-w2x6-h9xf","evidence":"osv:CGA-h2pp-w2x6-h9xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h2pp-w2x6-h9xf","aliases":["CGA-h2pp-w2x6-h9xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:01.927366377Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h2pp-w2x6-h9xf","advisory_id":"9b658d83-cca7-4eb4-b920-ce3e08632426","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.949309+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:05+00:00","detail_url":"/advisories/advisory%3A9b658d83-cca7-4eb4-b920-ce3e08632426","group":{"id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","revision":1,"primary_event_id":71313,"change":"published","superseded_by":[],"changed":{"id":71313,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-h2pp-w2x6-h9xf","summary":"CGA-h2pp-w2x6-h9xf","evidence":"osv:CGA-h2pp-w2x6-h9xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h2pp-w2x6-h9xf","aliases":["CGA-h2pp-w2x6-h9xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:01.927366377Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h2pp-w2x6-h9xf","advisory_id":"9b658d83-cca7-4eb4-b920-ce3e08632426","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.949309+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:05+00:00","detail_url":"/events/71313"},"members":[{"id":71313,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-h2pp-w2x6-h9xf","summary":"CGA-h2pp-w2x6-h9xf","evidence":"osv:CGA-h2pp-w2x6-h9xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-h2pp-w2x6-h9xf","aliases":["CGA-h2pp-w2x6-h9xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-h2pp-w2x6-h9xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/astfmtgen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:28:01.927366377Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9b658d83-cca7-4eb4-b920-ce3e08632426","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-h2pp-w2x6-h9xf","advisory_id":"9b658d83-cca7-4eb4-b920-ce3e08632426","event_types":["advisory"],"published_at":"2026-10-25T22:45:10.949309+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:05+00:00","detail_url":"/events/71313"}]}},{"id":70936,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fm4p-3m9w-xmpc","summary":"CGA-fm4p-3m9w-xmpc","evidence":"osv:CGA-fm4p-3m9w-xmpc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fm4p-3m9w-xmpc","aliases":["CGA-fm4p-3m9w-xmpc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:28:00.514037130Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm4p-3m9w-xmpc","advisory_id":"81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","event_types":["advisory"],"published_at":"2026-10-25T22:45:04.85729+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/advisories/advisory%3A81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","group":{"id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","revision":1,"primary_event_id":71307,"change":"published","superseded_by":[],"changed":{"id":71307,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fm4p-3m9w-xmpc","summary":"CGA-fm4p-3m9w-xmpc","evidence":"osv:CGA-fm4p-3m9w-xmpc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fm4p-3m9w-xmpc","aliases":["CGA-fm4p-3m9w-xmpc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:28:00.514037130Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm4p-3m9w-xmpc","advisory_id":"81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","event_types":["advisory"],"published_at":"2026-10-25T22:45:04.85729+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71307"},"members":[{"id":71307,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-fm4p-3m9w-xmpc","summary":"CGA-fm4p-3m9w-xmpc","evidence":"osv:CGA-fm4p-3m9w-xmpc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-fm4p-3m9w-xmpc","aliases":["CGA-fm4p-3m9w-xmpc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-fm4p-3m9w-xmpc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:28:00.514037130Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-fm4p-3m9w-xmpc","advisory_id":"81a4ef29-d7c1-46f2-96ac-80fb0fc81b2e","event_types":["advisory"],"published_at":"2026-10-25T22:45:04.85729+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71307"}]}},{"id":70935,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-74hc-rj64-x4xf","summary":"CGA-74hc-rj64-x4xf","evidence":"osv:CGA-74hc-rj64-x4xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-74hc-rj64-x4xf","aliases":["CGA-74hc-rj64-x4xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:57.851405855Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-74hc-rj64-x4xf","advisory_id":"30d920ae-71b0-4198-8e6b-e3d8245932b9","event_types":["advisory"],"published_at":"2026-10-25T22:45:03.853907+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:08+00:00","detail_url":"/advisories/advisory%3A30d920ae-71b0-4198-8e6b-e3d8245932b9","group":{"id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","revision":1,"primary_event_id":71306,"change":"published","superseded_by":[],"changed":{"id":71306,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-74hc-rj64-x4xf","summary":"CGA-74hc-rj64-x4xf","evidence":"osv:CGA-74hc-rj64-x4xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-74hc-rj64-x4xf","aliases":["CGA-74hc-rj64-x4xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:57.851405855Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-74hc-rj64-x4xf","advisory_id":"30d920ae-71b0-4198-8e6b-e3d8245932b9","event_types":["advisory"],"published_at":"2026-10-25T22:45:03.853907+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:08+00:00","detail_url":"/events/71306"},"members":[{"id":71306,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-74hc-rj64-x4xf","summary":"CGA-74hc-rj64-x4xf","evidence":"osv:CGA-74hc-rj64-x4xf","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-74hc-rj64-x4xf","aliases":["CGA-74hc-rj64-x4xf"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-74hc-rj64-x4xf.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/demo","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:57.851405855Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:30d920ae-71b0-4198-8e6b-e3d8245932b9","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-74hc-rj64-x4xf","advisory_id":"30d920ae-71b0-4198-8e6b-e3d8245932b9","event_types":["advisory"],"published_at":"2026-10-25T22:45:03.853907+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:08+00:00","detail_url":"/events/71306"}]}},{"id":70931,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6jgq-24fh-j4gh","summary":"CGA-6jgq-24fh-j4gh","evidence":"osv:CGA-6jgq-24fh-j4gh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6jgq-24fh-j4gh","aliases":["CGA-6jgq-24fh-j4gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:59.720368460Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6jgq-24fh-j4gh","advisory_id":"738c2bfb-8ab5-4fea-ba16-8f40706c3714","event_types":["advisory"],"published_at":"2026-10-25T22:44:59.051546+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:25+00:00","detail_url":"/advisories/advisory%3A738c2bfb-8ab5-4fea-ba16-8f40706c3714","group":{"id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","revision":1,"primary_event_id":71302,"change":"published","superseded_by":[],"changed":{"id":71302,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6jgq-24fh-j4gh","summary":"CGA-6jgq-24fh-j4gh","evidence":"osv:CGA-6jgq-24fh-j4gh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6jgq-24fh-j4gh","aliases":["CGA-6jgq-24fh-j4gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:59.720368460Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6jgq-24fh-j4gh","advisory_id":"738c2bfb-8ab5-4fea-ba16-8f40706c3714","event_types":["advisory"],"published_at":"2026-10-25T22:44:59.051546+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:25+00:00","detail_url":"/events/71302"},"members":[{"id":71302,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6jgq-24fh-j4gh","summary":"CGA-6jgq-24fh-j4gh","evidence":"osv:CGA-6jgq-24fh-j4gh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6jgq-24fh-j4gh","aliases":["CGA-6jgq-24fh-j4gh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6jgq-24fh-j4gh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/zkctld","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:59.720368460Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:738c2bfb-8ab5-4fea-ba16-8f40706c3714","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6jgq-24fh-j4gh","advisory_id":"738c2bfb-8ab5-4fea-ba16-8f40706c3714","event_types":["advisory"],"published_at":"2026-10-25T22:44:59.051546+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:25+00:00","detail_url":"/events/71302"}]}},{"id":70929,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-5328-rfq5-59p9","summary":"CGA-5328-rfq5-59p9","evidence":"osv:CGA-5328-rfq5-59p9","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5328-rfq5-59p9","aliases":["CGA-5328-rfq5-59p9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:59.580546837Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5328-rfq5-59p9","advisory_id":"cdc33e12-06d6-40bc-9480-b758d7b4c10f","event_types":["advisory"],"published_at":"2026-10-25T22:44:52.901401+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:19+00:00","detail_url":"/advisories/advisory%3Acdc33e12-06d6-40bc-9480-b758d7b4c10f","group":{"id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","revision":1,"primary_event_id":71300,"change":"published","superseded_by":[],"changed":{"id":71300,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-5328-rfq5-59p9","summary":"CGA-5328-rfq5-59p9","evidence":"osv:CGA-5328-rfq5-59p9","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5328-rfq5-59p9","aliases":["CGA-5328-rfq5-59p9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:59.580546837Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5328-rfq5-59p9","advisory_id":"cdc33e12-06d6-40bc-9480-b758d7b4c10f","event_types":["advisory"],"published_at":"2026-10-25T22:44:52.901401+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:19+00:00","detail_url":"/events/71300"},"members":[{"id":71300,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-5328-rfq5-59p9","summary":"CGA-5328-rfq5-59p9","evidence":"osv:CGA-5328-rfq5-59p9","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-5328-rfq5-59p9","aliases":["CGA-5328-rfq5-59p9"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-5328-rfq5-59p9.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctldclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:29Z"}]}}],"modified":"2026-10-02T18:27:59.580546837Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:cdc33e12-06d6-40bc-9480-b758d7b4c10f","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-5328-rfq5-59p9","advisory_id":"cdc33e12-06d6-40bc-9480-b758d7b4c10f","event_types":["advisory"],"published_at":"2026-10-25T22:44:52.901401+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:19+00:00","detail_url":"/events/71300"}]}},{"id":70928,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-8x65-9wm6-79f2","summary":"CGA-8x65-9wm6-79f2","evidence":"osv:CGA-8x65-9wm6-79f2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8x65-9wm6-79f2","aliases":["CGA-8x65-9wm6-79f2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:59.546873350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8x65-9wm6-79f2","advisory_id":"072bd249-b42c-43be-8300-2b8c48f301ac","event_types":["advisory"],"published_at":"2026-10-25T22:44:51.970739+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:18+00:00","detail_url":"/advisories/advisory%3A072bd249-b42c-43be-8300-2b8c48f301ac","group":{"id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","revision":1,"primary_event_id":71299,"change":"published","superseded_by":[],"changed":{"id":71299,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-8x65-9wm6-79f2","summary":"CGA-8x65-9wm6-79f2","evidence":"osv:CGA-8x65-9wm6-79f2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8x65-9wm6-79f2","aliases":["CGA-8x65-9wm6-79f2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:59.546873350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8x65-9wm6-79f2","advisory_id":"072bd249-b42c-43be-8300-2b8c48f301ac","event_types":["advisory"],"published_at":"2026-10-25T22:44:51.970739+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:18+00:00","detail_url":"/events/71299"},"members":[{"id":71299,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-8x65-9wm6-79f2","summary":"CGA-8x65-9wm6-79f2","evidence":"osv:CGA-8x65-9wm6-79f2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-8x65-9wm6-79f2","aliases":["CGA-8x65-9wm6-79f2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-8x65-9wm6-79f2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtctlclient","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:59.546873350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:072bd249-b42c-43be-8300-2b8c48f301ac","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-8x65-9wm6-79f2","advisory_id":"072bd249-b42c-43be-8300-2b8c48f301ac","event_types":["advisory"],"published_at":"2026-10-25T22:44:51.970739+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:18+00:00","detail_url":"/events/71299"}]}},{"id":70925,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-pwhh-j7r7-r7xc","summary":"CGA-pwhh-j7r7-r7xc","evidence":"osv:CGA-pwhh-j7r7-r7xc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwhh-j7r7-r7xc","aliases":["CGA-pwhh-j7r7-r7xc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:58.438604672Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwhh-j7r7-r7xc","advisory_id":"8060bdd9-8780-4e0d-bc13-ef20a6b19de5","event_types":["advisory"],"published_at":"2026-10-25T22:44:44.717394+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/advisories/advisory%3A8060bdd9-8780-4e0d-bc13-ef20a6b19de5","group":{"id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","revision":1,"primary_event_id":71296,"change":"published","superseded_by":[],"changed":{"id":71296,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-pwhh-j7r7-r7xc","summary":"CGA-pwhh-j7r7-r7xc","evidence":"osv:CGA-pwhh-j7r7-r7xc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwhh-j7r7-r7xc","aliases":["CGA-pwhh-j7r7-r7xc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:58.438604672Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwhh-j7r7-r7xc","advisory_id":"8060bdd9-8780-4e0d-bc13-ef20a6b19de5","event_types":["advisory"],"published_at":"2026-10-25T22:44:44.717394+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71296"},"members":[{"id":71296,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-pwhh-j7r7-r7xc","summary":"CGA-pwhh-j7r7-r7xc","evidence":"osv:CGA-pwhh-j7r7-r7xc","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-pwhh-j7r7-r7xc","aliases":["CGA-pwhh-j7r7-r7xc"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-pwhh-j7r7-r7xc.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/goyacc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:58.438604672Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8060bdd9-8780-4e0d-bc13-ef20a6b19de5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-pwhh-j7r7-r7xc","advisory_id":"8060bdd9-8780-4e0d-bc13-ef20a6b19de5","event_types":["advisory"],"published_at":"2026-10-25T22:44:44.717394+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71296"}]}},{"id":70924,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6672-7mgx-2chp","summary":"CGA-6672-7mgx-2chp","evidence":"osv:CGA-6672-7mgx-2chp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6672-7mgx-2chp","aliases":["CGA-6672-7mgx-2chp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:58.232096678Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6672-7mgx-2chp","advisory_id":"e614a6af-b482-4ff6-98ae-ef574aed4fb5","event_types":["advisory"],"published_at":"2026-10-25T22:44:43.543845+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/advisories/advisory%3Ae614a6af-b482-4ff6-98ae-ef574aed4fb5","group":{"id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","revision":1,"primary_event_id":71295,"change":"published","superseded_by":[],"changed":{"id":71295,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6672-7mgx-2chp","summary":"CGA-6672-7mgx-2chp","evidence":"osv:CGA-6672-7mgx-2chp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6672-7mgx-2chp","aliases":["CGA-6672-7mgx-2chp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:58.232096678Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6672-7mgx-2chp","advisory_id":"e614a6af-b482-4ff6-98ae-ef574aed4fb5","event_types":["advisory"],"published_at":"2026-10-25T22:44:43.543845+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71295"},"members":[{"id":71295,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-6672-7mgx-2chp","summary":"CGA-6672-7mgx-2chp","evidence":"osv:CGA-6672-7mgx-2chp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-6672-7mgx-2chp","aliases":["CGA-6672-7mgx-2chp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-6672-7mgx-2chp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:30Z"}]}}],"modified":"2026-10-02T18:27:58.232096678Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e614a6af-b482-4ff6-98ae-ef574aed4fb5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-6672-7mgx-2chp","advisory_id":"e614a6af-b482-4ff6-98ae-ef574aed4fb5","event_types":["advisory"],"published_at":"2026-10-25T22:44:43.543845+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71295"}]}},{"id":70922,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cw37-pp96-6m87","summary":"CGA-cw37-pp96-6m87","evidence":"osv:CGA-cw37-pp96-6m87","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cw37-pp96-6m87","aliases":["CGA-cw37-pp96-6m87"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:57.987538722Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw37-pp96-6m87","advisory_id":"c297e5b7-dfcc-442c-ae33-6778b02fd538","event_types":["advisory"],"published_at":"2026-10-25T22:44:41.620874+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:15+00:00","detail_url":"/advisories/advisory%3Ac297e5b7-dfcc-442c-ae33-6778b02fd538","group":{"id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","revision":1,"primary_event_id":71293,"change":"published","superseded_by":[],"changed":{"id":71293,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cw37-pp96-6m87","summary":"CGA-cw37-pp96-6m87","evidence":"osv:CGA-cw37-pp96-6m87","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cw37-pp96-6m87","aliases":["CGA-cw37-pp96-6m87"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:57.987538722Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw37-pp96-6m87","advisory_id":"c297e5b7-dfcc-442c-ae33-6778b02fd538","event_types":["advisory"],"published_at":"2026-10-25T22:44:41.620874+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:15+00:00","detail_url":"/events/71293"},"members":[{"id":71293,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cw37-pp96-6m87","summary":"CGA-cw37-pp96-6m87","evidence":"osv:CGA-cw37-pp96-6m87","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cw37-pp96-6m87","aliases":["CGA-cw37-pp96-6m87"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cw37-pp96-6m87.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtadmin","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:57.987538722Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c297e5b7-dfcc-442c-ae33-6778b02fd538","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cw37-pp96-6m87","advisory_id":"c297e5b7-dfcc-442c-ae33-6778b02fd538","event_types":["advisory"],"published_at":"2026-10-25T22:44:41.620874+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:15+00:00","detail_url":"/events/71293"}]}},{"id":70920,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-442h-87fg-pc9w","summary":"CGA-442h-87fg-pc9w","evidence":"osv:CGA-442h-87fg-pc9w","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-442h-87fg-pc9w","aliases":["CGA-442h-87fg-pc9w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:57.255622821Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-442h-87fg-pc9w","advisory_id":"1be6735f-4eaf-4725-8800-b3283f4b53de","event_types":["advisory"],"published_at":"2026-10-25T22:44:38.53962+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/advisories/advisory%3A1be6735f-4eaf-4725-8800-b3283f4b53de","group":{"id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","revision":1,"primary_event_id":71291,"change":"published","superseded_by":[],"changed":{"id":71291,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-442h-87fg-pc9w","summary":"CGA-442h-87fg-pc9w","evidence":"osv:CGA-442h-87fg-pc9w","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-442h-87fg-pc9w","aliases":["CGA-442h-87fg-pc9w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:57.255622821Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-442h-87fg-pc9w","advisory_id":"1be6735f-4eaf-4725-8800-b3283f4b53de","event_types":["advisory"],"published_at":"2026-10-25T22:44:38.53962+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71291"},"members":[{"id":71291,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-442h-87fg-pc9w","summary":"CGA-442h-87fg-pc9w","evidence":"osv:CGA-442h-87fg-pc9w","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-442h-87fg-pc9w","aliases":["CGA-442h-87fg-pc9w"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-442h-87fg-pc9w.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:57.255622821Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1be6735f-4eaf-4725-8800-b3283f4b53de","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-442h-87fg-pc9w","advisory_id":"1be6735f-4eaf-4725-8800-b3283f4b53de","event_types":["advisory"],"published_at":"2026-10-25T22:44:38.53962+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:21+00:00","detail_url":"/events/71291"}]}},{"id":70914,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-3hxc-6jw5-cpff","summary":"CGA-3hxc-6jw5-cpff","evidence":"osv:CGA-3hxc-6jw5-cpff","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3hxc-6jw5-cpff","aliases":["CGA-3hxc-6jw5-cpff"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:27:54.905949274Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3hxc-6jw5-cpff","advisory_id":"1432ad35-aad3-4f9e-9ef1-a86ed7915431","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.936836+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/advisories/advisory%3A1432ad35-aad3-4f9e-9ef1-a86ed7915431","group":{"id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","revision":1,"primary_event_id":71285,"change":"published","superseded_by":[],"changed":{"id":71285,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-3hxc-6jw5-cpff","summary":"CGA-3hxc-6jw5-cpff","evidence":"osv:CGA-3hxc-6jw5-cpff","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3hxc-6jw5-cpff","aliases":["CGA-3hxc-6jw5-cpff"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:27:54.905949274Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3hxc-6jw5-cpff","advisory_id":"1432ad35-aad3-4f9e-9ef1-a86ed7915431","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.936836+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71285"},"members":[{"id":71285,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-3hxc-6jw5-cpff","summary":"CGA-3hxc-6jw5-cpff","evidence":"osv:CGA-3hxc-6jw5-cpff","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-3hxc-6jw5-cpff","aliases":["CGA-3hxc-6jw5-cpff"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-3hxc-6jw5-cpff.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:28Z"}]}}],"modified":"2026-10-02T18:27:54.905949274Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:1432ad35-aad3-4f9e-9ef1-a86ed7915431","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-3hxc-6jw5-cpff","advisory_id":"1432ad35-aad3-4f9e-9ef1-a86ed7915431","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.936836+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:13+00:00","detail_url":"/events/71285"}]}},{"id":70913,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jr6v-8fg9-9wgh","summary":"CGA-jr6v-8fg9-9wgh","evidence":"osv:CGA-jr6v-8fg9-9wgh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jr6v-8fg9-9wgh","aliases":["CGA-jr6v-8fg9-9wgh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:54.759769955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jr6v-8fg9-9wgh","advisory_id":"b591b78e-64a0-4881-9461-56d4c6147d40","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.087555+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/advisories/advisory%3Ab591b78e-64a0-4881-9461-56d4c6147d40","group":{"id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","revision":1,"primary_event_id":71284,"change":"published","superseded_by":[],"changed":{"id":71284,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jr6v-8fg9-9wgh","summary":"CGA-jr6v-8fg9-9wgh","evidence":"osv:CGA-jr6v-8fg9-9wgh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jr6v-8fg9-9wgh","aliases":["CGA-jr6v-8fg9-9wgh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:54.759769955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jr6v-8fg9-9wgh","advisory_id":"b591b78e-64a0-4881-9461-56d4c6147d40","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.087555+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71284"},"members":[{"id":71284,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jr6v-8fg9-9wgh","summary":"CGA-jr6v-8fg9-9wgh","evidence":"osv:CGA-jr6v-8fg9-9wgh","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jr6v-8fg9-9wgh","aliases":["CGA-jr6v-8fg9-9wgh"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jr6v-8fg9-9wgh.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/ci-config","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:33Z"}]}}],"modified":"2026-10-02T18:27:54.759769955Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:b591b78e-64a0-4881-9461-56d4c6147d40","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jr6v-8fg9-9wgh","advisory_id":"b591b78e-64a0-4881-9461-56d4c6147d40","event_types":["advisory"],"published_at":"2026-10-25T22:44:31.087555+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:07+00:00","detail_url":"/events/71284"}]}},{"id":70910,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-grrr-2fgc-fxp8","summary":"CGA-grrr-2fgc-fxp8","evidence":"osv:CGA-grrr-2fgc-fxp8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-grrr-2fgc-fxp8","aliases":["CGA-grrr-2fgc-fxp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:54.069809644Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grrr-2fgc-fxp8","advisory_id":"5a128239-7893-42cb-b2ee-d240c53e8c89","event_types":["advisory"],"published_at":"2026-10-25T22:44:24.783219+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:14+00:00","detail_url":"/advisories/advisory%3A5a128239-7893-42cb-b2ee-d240c53e8c89","group":{"id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","revision":1,"primary_event_id":71281,"change":"published","superseded_by":[],"changed":{"id":71281,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-grrr-2fgc-fxp8","summary":"CGA-grrr-2fgc-fxp8","evidence":"osv:CGA-grrr-2fgc-fxp8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-grrr-2fgc-fxp8","aliases":["CGA-grrr-2fgc-fxp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:54.069809644Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grrr-2fgc-fxp8","advisory_id":"5a128239-7893-42cb-b2ee-d240c53e8c89","event_types":["advisory"],"published_at":"2026-10-25T22:44:24.783219+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:14+00:00","detail_url":"/events/71281"},"members":[{"id":71281,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-grrr-2fgc-fxp8","summary":"CGA-grrr-2fgc-fxp8","evidence":"osv:CGA-grrr-2fgc-fxp8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-grrr-2fgc-fxp8","aliases":["CGA-grrr-2fgc-fxp8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-grrr-2fgc-fxp8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/sizegen","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:54.069809644Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:5a128239-7893-42cb-b2ee-d240c53e8c89","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-grrr-2fgc-fxp8","advisory_id":"5a128239-7893-42cb-b2ee-d240c53e8c89","event_types":["advisory"],"published_at":"2026-10-25T22:44:24.783219+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:14+00:00","detail_url":"/events/71281"}]}},{"id":70909,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hj4g-ccq3-qcmp","summary":"CGA-hj4g-ccq3-qcmp","evidence":"osv:CGA-hj4g-ccq3-qcmp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hj4g-ccq3-qcmp","aliases":["CGA-hj4g-ccq3-qcmp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:54.111151727Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hj4g-ccq3-qcmp","advisory_id":"c6b5a5e9-a171-42e4-99f0-8ab55143aabc","event_types":["advisory"],"published_at":"2026-10-25T22:44:23.938202+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/advisories/advisory%3Ac6b5a5e9-a171-42e4-99f0-8ab55143aabc","group":{"id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","revision":1,"primary_event_id":71280,"change":"published","superseded_by":[],"changed":{"id":71280,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hj4g-ccq3-qcmp","summary":"CGA-hj4g-ccq3-qcmp","evidence":"osv:CGA-hj4g-ccq3-qcmp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hj4g-ccq3-qcmp","aliases":["CGA-hj4g-ccq3-qcmp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:54.111151727Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hj4g-ccq3-qcmp","advisory_id":"c6b5a5e9-a171-42e4-99f0-8ab55143aabc","event_types":["advisory"],"published_at":"2026-10-25T22:44:23.938202+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71280"},"members":[{"id":71280,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-hj4g-ccq3-qcmp","summary":"CGA-hj4g-ccq3-qcmp","evidence":"osv:CGA-hj4g-ccq3-qcmp","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-hj4g-ccq3-qcmp","aliases":["CGA-hj4g-ccq3-qcmp"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hj4g-ccq3-qcmp.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/makecolldata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:54.111151727Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:c6b5a5e9-a171-42e4-99f0-8ab55143aabc","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-hj4g-ccq3-qcmp","advisory_id":"c6b5a5e9-a171-42e4-99f0-8ab55143aabc","event_types":["advisory"],"published_at":"2026-10-25T22:44:23.938202+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:11+00:00","detail_url":"/events/71280"}]}},{"id":70907,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jvqv-88hv-8hh3","summary":"CGA-jvqv-88hv-8hh3","evidence":"osv:CGA-jvqv-88hv-8hh3","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jvqv-88hv-8hh3","aliases":["CGA-jvqv-88hv-8hh3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:53.845173337Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jvqv-88hv-8hh3","advisory_id":"e704db01-963c-4773-8767-70cca45aab8b","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.959235+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/advisories/advisory%3Ae704db01-963c-4773-8767-70cca45aab8b","group":{"id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","revision":1,"primary_event_id":71278,"change":"published","superseded_by":[],"changed":{"id":71278,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jvqv-88hv-8hh3","summary":"CGA-jvqv-88hv-8hh3","evidence":"osv:CGA-jvqv-88hv-8hh3","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jvqv-88hv-8hh3","aliases":["CGA-jvqv-88hv-8hh3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:53.845173337Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jvqv-88hv-8hh3","advisory_id":"e704db01-963c-4773-8767-70cca45aab8b","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.959235+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71278"},"members":[{"id":71278,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-jvqv-88hv-8hh3","summary":"CGA-jvqv-88hv-8hh3","evidence":"osv:CGA-jvqv-88hv-8hh3","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-jvqv-88hv-8hh3","aliases":["CGA-jvqv-88hv-8hh3"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-jvqv-88hv-8hh3.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/main","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:27Z"}]}}],"modified":"2026-10-02T18:27:53.845173337Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:e704db01-963c-4773-8767-70cca45aab8b","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-jvqv-88hv-8hh3","advisory_id":"e704db01-963c-4773-8767-70cca45aab8b","event_types":["advisory"],"published_at":"2026-10-25T22:44:21.959235+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:10+00:00","detail_url":"/events/71278"}]}},{"id":70897,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-m5v9-8jcq-w6vg","summary":"CGA-m5v9-8jcq-w6vg","evidence":"osv:CGA-m5v9-8jcq-w6vg","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m5v9-8jcq-w6vg","aliases":["CGA-m5v9-8jcq-w6vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:52.276772153Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m5v9-8jcq-w6vg","advisory_id":"52427d1c-cec5-4a2d-abde-5b2041ab636e","event_types":["advisory"],"published_at":"2026-10-25T22:44:11.396293+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/advisories/advisory%3A52427d1c-cec5-4a2d-abde-5b2041ab636e","group":{"id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","revision":1,"primary_event_id":71268,"change":"published","superseded_by":[],"changed":{"id":71268,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-m5v9-8jcq-w6vg","summary":"CGA-m5v9-8jcq-w6vg","evidence":"osv:CGA-m5v9-8jcq-w6vg","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m5v9-8jcq-w6vg","aliases":["CGA-m5v9-8jcq-w6vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:52.276772153Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m5v9-8jcq-w6vg","advisory_id":"52427d1c-cec5-4a2d-abde-5b2041ab636e","event_types":["advisory"],"published_at":"2026-10-25T22:44:11.396293+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71268"},"members":[{"id":71268,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-m5v9-8jcq-w6vg","summary":"CGA-m5v9-8jcq-w6vg","evidence":"osv:CGA-m5v9-8jcq-w6vg","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-m5v9-8jcq-w6vg","aliases":["CGA-m5v9-8jcq-w6vg"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m5v9-8jcq-w6vg.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttestserver","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:26Z"}]}}],"modified":"2026-10-02T18:27:52.276772153Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:52427d1c-cec5-4a2d-abde-5b2041ab636e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-m5v9-8jcq-w6vg","advisory_id":"52427d1c-cec5-4a2d-abde-5b2041ab636e","event_types":["advisory"],"published_at":"2026-10-25T22:44:11.396293+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71268"}]}},{"id":70896,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-48q8-v4fc-7c64","summary":"CGA-48q8-v4fc-7c64","evidence":"osv:CGA-48q8-v4fc-7c64","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-48q8-v4fc-7c64","aliases":["CGA-48q8-v4fc-7c64"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:52.123421015Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48q8-v4fc-7c64","advisory_id":"3e9189b6-6d7e-4005-ae84-45a46cfb616d","event_types":["advisory"],"published_at":"2026-10-25T22:44:10.566154+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:22+00:00","detail_url":"/advisories/advisory%3A3e9189b6-6d7e-4005-ae84-45a46cfb616d","group":{"id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","revision":1,"primary_event_id":71267,"change":"published","superseded_by":[],"changed":{"id":71267,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-48q8-v4fc-7c64","summary":"CGA-48q8-v4fc-7c64","evidence":"osv:CGA-48q8-v4fc-7c64","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-48q8-v4fc-7c64","aliases":["CGA-48q8-v4fc-7c64"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:52.123421015Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48q8-v4fc-7c64","advisory_id":"3e9189b6-6d7e-4005-ae84-45a46cfb616d","event_types":["advisory"],"published_at":"2026-10-25T22:44:10.566154+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:22+00:00","detail_url":"/events/71267"},"members":[{"id":71267,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-48q8-v4fc-7c64","summary":"CGA-48q8-v4fc-7c64","evidence":"osv:CGA-48q8-v4fc-7c64","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-48q8-v4fc-7c64","aliases":["CGA-48q8-v4fc-7c64"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-48q8-v4fc-7c64.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtorc","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:52.123421015Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:3e9189b6-6d7e-4005-ae84-45a46cfb616d","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-48q8-v4fc-7c64","advisory_id":"3e9189b6-6d7e-4005-ae84-45a46cfb616d","event_types":["advisory"],"published_at":"2026-10-25T22:44:10.566154+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:22+00:00","detail_url":"/events/71267"}]}},{"id":70890,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-q9fw-3jp8-4w9r","summary":"CGA-q9fw-3jp8-4w9r","evidence":"osv:CGA-q9fw-3jp8-4w9r","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q9fw-3jp8-4w9r","aliases":["CGA-q9fw-3jp8-4w9r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:49.234536577Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q9fw-3jp8-4w9r","advisory_id":"96a02f6e-ddf6-40bd-ab35-7f4bb3564840","event_types":["advisory"],"published_at":"2026-10-25T22:44:04.207364+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/advisories/advisory%3A96a02f6e-ddf6-40bd-ab35-7f4bb3564840","group":{"id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","revision":1,"primary_event_id":71261,"change":"published","superseded_by":[],"changed":{"id":71261,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-q9fw-3jp8-4w9r","summary":"CGA-q9fw-3jp8-4w9r","evidence":"osv:CGA-q9fw-3jp8-4w9r","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q9fw-3jp8-4w9r","aliases":["CGA-q9fw-3jp8-4w9r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:49.234536577Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q9fw-3jp8-4w9r","advisory_id":"96a02f6e-ddf6-40bd-ab35-7f4bb3564840","event_types":["advisory"],"published_at":"2026-10-25T22:44:04.207364+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71261"},"members":[{"id":71261,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-q9fw-3jp8-4w9r","summary":"CGA-q9fw-3jp8-4w9r","evidence":"osv:CGA-q9fw-3jp8-4w9r","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-q9fw-3jp8-4w9r","aliases":["CGA-q9fw-3jp8-4w9r"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-q9fw-3jp8-4w9r.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttlstest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:31Z"}]}}],"modified":"2026-10-02T18:27:49.234536577Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:96a02f6e-ddf6-40bd-ab35-7f4bb3564840","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-q9fw-3jp8-4w9r","advisory_id":"96a02f6e-ddf6-40bd-ab35-7f4bb3564840","event_types":["advisory"],"published_at":"2026-10-25T22:44:04.207364+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:23+00:00","detail_url":"/events/71261"}]}},{"id":70883,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cqjc-pmmg-mgp2","summary":"CGA-cqjc-pmmg-mgp2","evidence":"osv:CGA-cqjc-pmmg-mgp2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cqjc-pmmg-mgp2","aliases":["CGA-cqjc-pmmg-mgp2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:48.113547970Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cqjc-pmmg-mgp2","advisory_id":"10da411d-383c-4fad-9fc8-af85a52e588e","event_types":["advisory"],"published_at":"2026-10-25T22:43:53.554591+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:12+00:00","detail_url":"/advisories/advisory%3A10da411d-383c-4fad-9fc8-af85a52e588e","group":{"id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","revision":1,"primary_event_id":71254,"change":"published","superseded_by":[],"changed":{"id":71254,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cqjc-pmmg-mgp2","summary":"CGA-cqjc-pmmg-mgp2","evidence":"osv:CGA-cqjc-pmmg-mgp2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cqjc-pmmg-mgp2","aliases":["CGA-cqjc-pmmg-mgp2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:48.113547970Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cqjc-pmmg-mgp2","advisory_id":"10da411d-383c-4fad-9fc8-af85a52e588e","event_types":["advisory"],"published_at":"2026-10-25T22:43:53.554591+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:12+00:00","detail_url":"/events/71254"},"members":[{"id":71254,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-cqjc-pmmg-mgp2","summary":"CGA-cqjc-pmmg-mgp2","evidence":"osv:CGA-cqjc-pmmg-mgp2","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-cqjc-pmmg-mgp2","aliases":["CGA-cqjc-pmmg-mgp2"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=aarch64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=aarch64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-cqjc-pmmg-mgp2.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/release-notes","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T20:37:32Z"}]}}],"modified":"2026-10-02T18:27:48.113547970Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:10da411d-383c-4fad-9fc8-af85a52e588e","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-cqjc-pmmg-mgp2","advisory_id":"10da411d-383c-4fad-9fc8-af85a52e588e","event_types":["advisory"],"published_at":"2026-10-25T22:43:53.554591+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T12:48:12+00:00","detail_url":"/events/71254"}]}},{"id":67194,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gh3c-8499-jq7q","summary":"CGA-gh3c-8499-jq7q","evidence":"osv:CGA-gh3c-8499-jq7q","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gh3c-8499-jq7q","aliases":["CGA-gh3c-8499-jq7q"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh3c-8499-jq7q.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh3c-8499-jq7q.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:28Z"}]}}],"modified":"2026-10-02T05:27:41.852043176Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gh3c-8499-jq7q","advisory_id":"07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","event_types":["advisory"],"published_at":"2026-10-25T21:12:14.873918+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:35+00:00","detail_url":"/advisories/advisory%3A07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","group":{"id":"advisory:07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","revision":1,"primary_event_id":67564,"change":"published","superseded_by":[],"changed":{"id":67564,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gh3c-8499-jq7q","summary":"CGA-gh3c-8499-jq7q","evidence":"osv:CGA-gh3c-8499-jq7q","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gh3c-8499-jq7q","aliases":["CGA-gh3c-8499-jq7q"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh3c-8499-jq7q.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh3c-8499-jq7q.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:28Z"}]}}],"modified":"2026-10-02T05:27:41.852043176Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gh3c-8499-jq7q","advisory_id":"07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","event_types":["advisory"],"published_at":"2026-10-25T21:12:14.873918+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:35+00:00","detail_url":"/events/67564"},"members":[{"id":67564,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gh3c-8499-jq7q","summary":"CGA-gh3c-8499-jq7q","evidence":"osv:CGA-gh3c-8499-jq7q","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gh3c-8499-jq7q","aliases":["CGA-gh3c-8499-jq7q"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh3c-8499-jq7q.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:28Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gh3c-8499-jq7q.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/maketestdata","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:28Z"}]}}],"modified":"2026-10-02T05:27:41.852043176Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gh3c-8499-jq7q","advisory_id":"07ccc1c1-738f-47f9-8aaa-b23f8d95c51c","event_types":["advisory"],"published_at":"2026-10-25T21:12:14.873918+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:35+00:00","detail_url":"/events/67564"}]}},{"id":67191,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-vhx4-988m-grm4","summary":"CGA-vhx4-988m-grm4","evidence":"osv:CGA-vhx4-988m-grm4","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-vhx4-988m-grm4","aliases":["CGA-vhx4-988m-grm4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhx4-988m-grm4.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhx4-988m-grm4.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}}],"modified":"2026-10-02T05:27:41.806854300Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ff4eadde-49d1-41f1-bb11-128d80f15966","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vhx4-988m-grm4","advisory_id":"ff4eadde-49d1-41f1-bb11-128d80f15966","event_types":["advisory"],"published_at":"2026-10-25T21:12:10.867436+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:44+00:00","detail_url":"/advisories/advisory%3Aff4eadde-49d1-41f1-bb11-128d80f15966","group":{"id":"advisory:ff4eadde-49d1-41f1-bb11-128d80f15966","revision":1,"primary_event_id":67561,"change":"published","superseded_by":[],"changed":{"id":67561,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-vhx4-988m-grm4","summary":"CGA-vhx4-988m-grm4","evidence":"osv:CGA-vhx4-988m-grm4","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-vhx4-988m-grm4","aliases":["CGA-vhx4-988m-grm4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhx4-988m-grm4.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhx4-988m-grm4.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}}],"modified":"2026-10-02T05:27:41.806854300Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ff4eadde-49d1-41f1-bb11-128d80f15966","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vhx4-988m-grm4","advisory_id":"ff4eadde-49d1-41f1-bb11-128d80f15966","event_types":["advisory"],"published_at":"2026-10-25T21:12:10.867436+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:44+00:00","detail_url":"/events/67561"},"members":[{"id":67561,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-vhx4-988m-grm4","summary":"CGA-vhx4-988m-grm4","evidence":"osv:CGA-vhx4-988m-grm4","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-vhx4-988m-grm4","aliases":["CGA-vhx4-988m-grm4"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhx4-988m-grm4.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-vhx4-988m-grm4.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtgateclienttest","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}}],"modified":"2026-10-02T05:27:41.806854300Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:ff4eadde-49d1-41f1-bb11-128d80f15966","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-vhx4-988m-grm4","advisory_id":"ff4eadde-49d1-41f1-bb11-128d80f15966","event_types":["advisory"],"published_at":"2026-10-25T21:12:10.867436+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:44+00:00","detail_url":"/events/67561"}]}},{"id":67189,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-9hfh-rqj3-mr29","summary":"CGA-9hfh-rqj3-mr29","evidence":"osv:CGA-9hfh-rqj3-mr29","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9hfh-rqj3-mr29","aliases":["CGA-9hfh-rqj3-mr29"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9hfh-rqj3-mr29.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttablet","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9hfh-rqj3-mr29.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttablet","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:31Z"}]}}],"modified":"2026-10-02T05:27:41.754833544Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9hfh-rqj3-mr29","advisory_id":"9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","event_types":["advisory"],"published_at":"2026-10-25T21:12:08.577468+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:45+00:00","detail_url":"/advisories/advisory%3A9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","group":{"id":"advisory:9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","revision":1,"primary_event_id":67559,"change":"published","superseded_by":[],"changed":{"id":67559,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-9hfh-rqj3-mr29","summary":"CGA-9hfh-rqj3-mr29","evidence":"osv:CGA-9hfh-rqj3-mr29","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9hfh-rqj3-mr29","aliases":["CGA-9hfh-rqj3-mr29"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9hfh-rqj3-mr29.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttablet","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9hfh-rqj3-mr29.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttablet","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:31Z"}]}}],"modified":"2026-10-02T05:27:41.754833544Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9hfh-rqj3-mr29","advisory_id":"9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","event_types":["advisory"],"published_at":"2026-10-25T21:12:08.577468+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:45+00:00","detail_url":"/events/67559"},"members":[{"id":67559,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-9hfh-rqj3-mr29","summary":"CGA-9hfh-rqj3-mr29","evidence":"osv:CGA-9hfh-rqj3-mr29","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-9hfh-rqj3-mr29","aliases":["CGA-9hfh-rqj3-mr29"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9hfh-rqj3-mr29.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttablet","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:31Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-9hfh-rqj3-mr29.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vttablet","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:31Z"}]}}],"modified":"2026-10-02T05:27:41.754833544Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-9hfh-rqj3-mr29","advisory_id":"9a6c93ea-f5bb-405b-98e7-65e0ee123aa7","event_types":["advisory"],"published_at":"2026-10-25T21:12:08.577468+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:45+00:00","detail_url":"/events/67559"}]}},{"id":67186,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-p42v-8pcg-86rw","summary":"CGA-p42v-8pcg-86rw","evidence":"osv:CGA-p42v-8pcg-86rw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p42v-8pcg-86rw","aliases":["CGA-p42v-8pcg-86rw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p42v-8pcg-86rw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p42v-8pcg-86rw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:30Z"}]}}],"modified":"2026-10-02T05:27:41.692060827Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f6f6800-2603-4f5b-a188-86571d83fc85","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p42v-8pcg-86rw","advisory_id":"8f6f6800-2603-4f5b-a188-86571d83fc85","event_types":["advisory"],"published_at":"2026-10-25T21:12:04.798054+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:39+00:00","detail_url":"/advisories/advisory%3A8f6f6800-2603-4f5b-a188-86571d83fc85","group":{"id":"advisory:8f6f6800-2603-4f5b-a188-86571d83fc85","revision":1,"primary_event_id":67556,"change":"published","superseded_by":[],"changed":{"id":67556,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-p42v-8pcg-86rw","summary":"CGA-p42v-8pcg-86rw","evidence":"osv:CGA-p42v-8pcg-86rw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p42v-8pcg-86rw","aliases":["CGA-p42v-8pcg-86rw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p42v-8pcg-86rw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p42v-8pcg-86rw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:30Z"}]}}],"modified":"2026-10-02T05:27:41.692060827Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f6f6800-2603-4f5b-a188-86571d83fc85","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p42v-8pcg-86rw","advisory_id":"8f6f6800-2603-4f5b-a188-86571d83fc85","event_types":["advisory"],"published_at":"2026-10-25T21:12:04.798054+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:39+00:00","detail_url":"/events/67556"},"members":[{"id":67556,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-p42v-8pcg-86rw","summary":"CGA-p42v-8pcg-86rw","evidence":"osv:CGA-p42v-8pcg-86rw","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-p42v-8pcg-86rw","aliases":["CGA-p42v-8pcg-86rw"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p42v-8pcg-86rw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:30Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-p42v-8pcg-86rw.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtbackup","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:30Z"}]}}],"modified":"2026-10-02T05:27:41.692060827Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:8f6f6800-2603-4f5b-a188-86571d83fc85","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-p42v-8pcg-86rw","advisory_id":"8f6f6800-2603-4f5b-a188-86571d83fc85","event_types":["advisory"],"published_at":"2026-10-25T21:12:04.798054+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:39+00:00","detail_url":"/events/67556"}]}},{"id":67165,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gp27-jq34-fwg8","summary":"CGA-gp27-jq34-fwg8","evidence":"osv:CGA-gp27-jq34-fwg8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gp27-jq34-fwg8","aliases":["CGA-gp27-jq34-fwg8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gp27-jq34-fwg8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gp27-jq34-fwg8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:27Z"}]}}],"modified":"2026-10-02T05:27:41.100947350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:dc85bd13-524c-4d10-9be0-76f07a2841b5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gp27-jq34-fwg8","advisory_id":"dc85bd13-524c-4d10-9be0-76f07a2841b5","event_types":["advisory"],"published_at":"2026-10-25T21:11:29.489474+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:43+00:00","detail_url":"/advisories/advisory%3Adc85bd13-524c-4d10-9be0-76f07a2841b5","group":{"id":"advisory:dc85bd13-524c-4d10-9be0-76f07a2841b5","revision":1,"primary_event_id":67535,"change":"published","superseded_by":[],"changed":{"id":67535,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gp27-jq34-fwg8","summary":"CGA-gp27-jq34-fwg8","evidence":"osv:CGA-gp27-jq34-fwg8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gp27-jq34-fwg8","aliases":["CGA-gp27-jq34-fwg8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gp27-jq34-fwg8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gp27-jq34-fwg8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:27Z"}]}}],"modified":"2026-10-02T05:27:41.100947350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:dc85bd13-524c-4d10-9be0-76f07a2841b5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gp27-jq34-fwg8","advisory_id":"dc85bd13-524c-4d10-9be0-76f07a2841b5","event_types":["advisory"],"published_at":"2026-10-25T21:11:29.489474+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:43+00:00","detail_url":"/events/67535"},"members":[{"id":67535,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gp27-jq34-fwg8","summary":"CGA-gp27-jq34-fwg8","evidence":"osv:CGA-gp27-jq34-fwg8","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gp27-jq34-fwg8","aliases":["CGA-gp27-jq34-fwg8"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gp27-jq34-fwg8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:27Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gp27-jq34-fwg8.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/vtexplain","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:27Z"}]}}],"modified":"2026-10-02T05:27:41.100947350Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:dc85bd13-524c-4d10-9be0-76f07a2841b5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gp27-jq34-fwg8","advisory_id":"dc85bd13-524c-4d10-9be0-76f07a2841b5","event_types":["advisory"],"published_at":"2026-10-25T21:11:29.489474+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:43+00:00","detail_url":"/events/67535"}]}},{"id":67155,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-mq3c-pv9c-wh34","summary":"CGA-mq3c-pv9c-wh34","evidence":"osv:CGA-mq3c-pv9c-wh34","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-mq3c-pv9c-wh34","aliases":["CGA-mq3c-pv9c-wh34"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mq3c-pv9c-wh34.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mq3c-pv9c-wh34.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:33Z"}]}}],"modified":"2026-10-02T05:27:40.782942093Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:79e9bd2d-7d7b-4458-a81e-28458c4688f6","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mq3c-pv9c-wh34","advisory_id":"79e9bd2d-7d7b-4458-a81e-28458c4688f6","event_types":["advisory"],"published_at":"2026-10-25T21:11:19.162067+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:37+00:00","detail_url":"/advisories/advisory%3A79e9bd2d-7d7b-4458-a81e-28458c4688f6","group":{"id":"advisory:79e9bd2d-7d7b-4458-a81e-28458c4688f6","revision":1,"primary_event_id":67525,"change":"published","superseded_by":[],"changed":{"id":67525,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-mq3c-pv9c-wh34","summary":"CGA-mq3c-pv9c-wh34","evidence":"osv:CGA-mq3c-pv9c-wh34","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-mq3c-pv9c-wh34","aliases":["CGA-mq3c-pv9c-wh34"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mq3c-pv9c-wh34.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mq3c-pv9c-wh34.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:33Z"}]}}],"modified":"2026-10-02T05:27:40.782942093Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:79e9bd2d-7d7b-4458-a81e-28458c4688f6","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mq3c-pv9c-wh34","advisory_id":"79e9bd2d-7d7b-4458-a81e-28458c4688f6","event_types":["advisory"],"published_at":"2026-10-25T21:11:19.162067+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:37+00:00","detail_url":"/events/67525"},"members":[{"id":67525,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-mq3c-pv9c-wh34","summary":"CGA-mq3c-pv9c-wh34","evidence":"osv:CGA-mq3c-pv9c-wh34","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-mq3c-pv9c-wh34","aliases":["CGA-mq3c-pv9c-wh34"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mq3c-pv9c-wh34.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:33Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-mq3c-pv9c-wh34.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/rulesctl","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:33Z"}]}}],"modified":"2026-10-02T05:27:40.782942093Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:79e9bd2d-7d7b-4458-a81e-28458c4688f6","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-mq3c-pv9c-wh34","advisory_id":"79e9bd2d-7d7b-4458-a81e-28458c4688f6","event_types":["advisory"],"published_at":"2026-10-25T21:11:19.162067+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:37+00:00","detail_url":"/events/67525"}]}},{"id":67143,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gw7p-jx88-jh45","summary":"CGA-gw7p-jx88-jh45","evidence":"osv:CGA-gw7p-jx88-jh45","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gw7p-jx88-jh45","aliases":["CGA-gw7p-jx88-jh45"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gw7p-jx88-jh45.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gw7p-jx88-jh45.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}}],"modified":"2026-10-02T05:27:40.249027068Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7a6781bc-1261-4273-ac66-a35730e8c3b5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gw7p-jx88-jh45","advisory_id":"7a6781bc-1261-4273-ac66-a35730e8c3b5","event_types":["advisory"],"published_at":"2026-10-25T21:11:05.615558+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:36+00:00","detail_url":"/advisories/advisory%3A7a6781bc-1261-4273-ac66-a35730e8c3b5","group":{"id":"advisory:7a6781bc-1261-4273-ac66-a35730e8c3b5","revision":1,"primary_event_id":67513,"change":"published","superseded_by":[],"changed":{"id":67513,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gw7p-jx88-jh45","summary":"CGA-gw7p-jx88-jh45","evidence":"osv:CGA-gw7p-jx88-jh45","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gw7p-jx88-jh45","aliases":["CGA-gw7p-jx88-jh45"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gw7p-jx88-jh45.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gw7p-jx88-jh45.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}}],"modified":"2026-10-02T05:27:40.249027068Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7a6781bc-1261-4273-ac66-a35730e8c3b5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gw7p-jx88-jh45","advisory_id":"7a6781bc-1261-4273-ac66-a35730e8c3b5","event_types":["advisory"],"published_at":"2026-10-25T21:11:05.615558+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:36+00:00","detail_url":"/events/67513"},"members":[{"id":67513,"cve_ids":["CVE-2026-65959"],"payload":{"kind":"advisory","title":"CGA-gw7p-jx88-jh45","summary":"CGA-gw7p-jx88-jh45","evidence":"osv:CGA-gw7p-jx88-jh45","products":[{"name":{"value":"vitess-23-binaries","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"vitess-23-binaries","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"23.0.7-r0","evidence":"/affected/1/ranges"}],"affected_versions":[]}],"severity":"medium","structured":{"id":"CGA-gw7p-jx88-jh45","aliases":["CGA-gw7p-jx88-jh45"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/chainguard/vitess-23-binaries?arch=x86_64","ecosystem":"Chainguard"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gw7p-jx88-jh45.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"23.0.7-r0"}]}],"package":{"name":"vitess-23-binaries","purl":"pkg:apk/wolfi/vitess-23-binaries?arch=x86_64","ecosystem":"Wolfi"},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-gw7p-jx88-jh45.json"},"ecosystem_specific":{"components":[{"component_name":"vitess.io/vitess","component_purl":"pkg:golang/vitess.io/vitess@v0.23.6%2Bdirty","component_type":"go-module","component_version":"v0.23.6+dirty","component_location":"/usr/bin/releases","latest_event_status":"fixed","latest_event_timestamp":"2026-10-01T22:06:40Z"}]}}],"modified":"2026-10-02T05:27:40.249027068Z","provider":"osv","upstream":["CVE-2026-65959","GHSA-mhc4-g3wh-cw7m","GO-2026-6356"],"references":["https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/65xxx/CVE-2026-65959.json","https://github.com/vitessio/vitess/security/advisories/GHSA-mhc4-g3wh-cw7m","https://nvd.nist.gov/vuln/detail/CVE-2026-65959","https://github.com/vitessio/vitess/commit/4c58cd70edc6b03d61cb65842c342ac08341e64f","https://github.com/vitessio/vitess/commit/657662e78bde1c82df680e9cc43a686d619f8094","https://github.com/vitessio/vitess/commit/d929225a450027406687d27af8dca45620945ceb"]},"related_cves":[{"value":"CVE-2026-65959","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:7a6781bc-1261-4273-ac66-a35730e8c3b5","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/CGA-gw7p-jx88-jh45","advisory_id":"7a6781bc-1261-4273-ac66-a35730e8c3b5","event_types":["advisory"],"published_at":"2026-10-25T21:11:05.615558+00:00","technologies":["core-osv","vitess-23-binaries"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-04T11:05:36+00:00","detail_url":"/events/67513"}]}}],"next_after":70953,"next_before":67143}