Vitess is a database clustering system for horizontal scaling of MySQL. When executing the following simple query, the `vtgate` will go into an endless loop that also keeps consuming memory and eventually will run out of memory. This vulnerability is fixed in 19.0.4, 18.0.5, and 17.0.7.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| github.com/vitessio/vitess(Go) | 19.0.0 | 19.0.4 | N/A |
| github.com/vitessio/vitess(Go) | 18.0.0 | 18.0.5 | N/A |
| github.com/vitessio/vitess(Go) | 0 | 17.0.7 | N/A |
| vitess.io/vitess(Go) | 0 | 0.17.7 | N/A |
| vitess.io/vitess(Go) | 0.18.0 | 0.18.5 | N/A |
| vitess.io/vitess(Go) | 0.19.0 | 0.19.4 | N/A |
CVSS Metrics
