{"schema":"vulnpedia.research/1","cve":"CVE-2026-104252","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8","tags":["x_refsource_CONFIRM","Vendor Advisory","Exploit","Mitigation","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/security/advisories/GHSA-v75v-6fpf-gvw8"}]},{"url":"https://github.com/vitessio/vitess/pull/20255","tags":["x_refsource_MISC","Issue Tracking","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/pull/20255"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/pull/20255"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/pull/20255"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/pull/20255"}]},{"url":"https://github.com/vitessio/vitess/pull/20273","tags":["x_refsource_MISC","Issue Tracking","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/pull/20273"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/pull/20273"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/pull/20273"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/pull/20273"}]},{"url":"https://github.com/vitessio/vitess/pull/20274","tags":["x_refsource_MISC","Issue Tracking","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/pull/20274"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/pull/20274"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/pull/20274"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/pull/20274"}]},{"url":"https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/commit/3140c1846cd120db34f33b2083139b4ab638aed2"}]},{"url":"https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/commit/976e1e0d78f9d29d02e5e31b4aa7e180648f08af"}]},{"url":"https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7","tags":["x_refsource_MISC","Patch","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/commit/c1ed96302e658190168c971afdac730cf70e43f7"}]},{"url":"https://github.com/vitessio/vitess/releases/tag/v23.0.5","tags":["x_refsource_MISC","Release Notes","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/releases/tag/v23.0.5"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/releases/tag/v23.0.5"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/releases/tag/v23.0.5"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/releases/tag/v23.0.5"}]},{"url":"https://github.com/vitessio/vitess/releases/tag/v24.0.2","tags":["x_refsource_MISC","Release Notes","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-13T19:22:58.208Z","url":"https://github.com/vitessio/vitess/releases/tag/v24.0.2"},{"source":"nvd","sourceId":"CVE-2026-104252","modified":"2026-10-23T15:14:48.240","url":"https://github.com/vitessio/vitess/releases/tag/v24.0.2"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess/releases/tag/v24.0.2"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess/releases/tag/v24.0.2"}]},{"url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","origins":[{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104252","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","origins":[{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104252"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104252"}]},{"url":"https://github.com/vitessio/vitess","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","origins":[{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://github.com/vitessio/vitess"},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://github.com/vitessio/vitess"}]},{"source":"euvd","sourceId":"EUVD-2026-100525","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100525","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-100525","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100525"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8","ecosystem":"Go","name":"vitess.io/vitess","purl":"pkg:golang/vitess.io/vitess","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.23.5"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-v75v-6fpf-gvw8/GHSA-v75v-6fpf-gvw8.json"},"modified":"2026-10-15T20:30:05.447638204Z","origins":[{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8"}]},{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8","ecosystem":"Go","name":"vitess.io/vitess","purl":"pkg:golang/vitess.io/vitess","ranges":[{"type":"SEMVER","events":[{"introduced":"0.24.0"},{"fixed":"0.24.2"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-v75v-6fpf-gvw8/GHSA-v75v-6fpf-gvw8.json"},"modified":"2026-10-15T20:30:05.447638204Z","origins":[{"source":"ghsa","sourceId":"GHSA-v75v-6fpf-gvw8","modified":"2026-10-15T20:30:05.447638204Z","url":"https://osv.dev/vulnerability/GHSA-v75v-6fpf-gvw8"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}