Apache Skywalking (Apache Software Foundation) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-04. Vendor: Apache Software Foundation.

CVEs of Apache Skywalking

• CVE-2026-85229 - CVSS 6.1 (medium), 2026-09-04: ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache SkyWalking…
• CVE-2026-71216 - CVSS 5.3 (medium), 2026-09-04: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP. PagerDuty serves this endpoint over HTTPS and will normally answer plain HTTP…
• CVE-2026-30778 - CVSS 7.5 (high), 2026-04-15: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. This issue affects Apache SkyWalking:…
• CVE-2025-54057 - CVSS 6.1 (medium), 2025-11-27: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <=…