{"id":"GO-2026-6798","revision":"61e2c24f1cf642ad88118994dc9726ae","records":[{"revision":"61e2c24f1cf642ad88118994dc9726ae","observedAt":"2026-11-05T23:38:32.248+00:00","statement":{"source":"osv","id":"GO-2026-6798","aliases":["CVE-2026-104252","GHSA-v75v-6fpf-gvw8"],"title":"Vitess vttablet /twopcz reflected XSS in vitess.io/vitess","description":"Vitess vttablet /twopcz reflected XSS in vitess.io/vitess","state":0,"publishedAt":"2026-11-05T22:53:53+00:00","modifiedAt":"2026-11-05T23:15:12.6548506+00:00","affected":[{"ecosystem":"Go","name":"vitess.io/vitess","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.23.5"},{"kind":"introduced","version":"0.24.0"},{"kind":"fixed","version":"0.24.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8","https://nvd.nist.gov/vuln/detail/CVE-2026-104252","https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2","https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af","https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7","https://github.com/vitessio/vitess/pull/20255","https://github.com/vitessio/vitess/pull/20273","https://github.com/vitessio/vitess/pull/20274","https://github.com/vitessio/vitess/releases/tag/v23.0.5","https://github.com/vitessio/vitess/releases/tag/v24.0.2"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6798","license":"OSV · upstream source license applies","key":"osv:GO-2026-6798","identifiers":["GO-2026-6798","CVE-2026-104252","GHSA-v75v-6fpf-gvw8"]},"retained":false,"historicalAffected":[]}],"coverage":[]}