YU
Product
YugabyteDB
3
CVEs
0
On KEV
7.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add YugabyteDB to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8863 | 7.0 | Aug 11 | YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission Affected: 2024.1.0 before 2024.1.3; 2.20.0.0 before 2.20.7.0; 2.23.0.0 before 2.23.1.0 |
| CVE-2025-8862 | 7.0 | Aug 11 | YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations Affected: 2024.1.0 before 2024.1.3; 2.20.0.0 before 2.20.7.0; 2.23.0.0 before 2.23.1.0 |
| CVE-2025-8865 | 4.1 | Aug 11 | The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs Affected: 2024.1.0.0 before 2024.1.3.0; 2024.2.0.0 before 2024.2.2.5; 2.20.0.0 before 2.20.9.0 |
Showing 3