Apache Software Foundation Skywalking vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Skywalking: 2 record(s), with affected versions and fixes.
cpe:2.3:a:apache:skywalking

CVE-2026-30778 High · 7.5 CWE-202 Apr 15, 2026

Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.

The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0. Users are recommended to upgrade to version 10.4.0, which fixes the issue.

CVE-2025-54057 Medium · 6.1 CWE-80 Nov 27, 2025

Apache SkyWalking: Stored XSS vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <= 10.2.0. Users are recommended to upgrade to version 10.3.0, which fixes the issue.