Skywalking (Apache) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 66 known versions, newest CVE from 2026-04-15. Vendor: Apache.

CVEs of Skywalking

• CVE-2026-30778 - CVSS 7.5 (high), 2026-04-15: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking:…
• CVE-2025-54057 - CVSS 6.1 (medium), 2025-11-27: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <=…
• CVE-2020-13921 - CVSS 9.8 (critical), 2020-08-05: **Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
• CVE-2020-9483 - CVSS 7.5 (high), 2020-06-30: **Resolved** When use H2/MySQL/TiDB as Apache SkyWalking storage, the metadata query through GraphQL protocol, there is a SQL injection vulnerability, which…