Threats affecting pkg:maven/org.apache.skywalking/skywalking

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-30778Apache SkyWalking · Exposure of Sensitive Information Through Data Queries High7.5EPSS 0.5%2026-04-15CVE Database V5CVE-2026-30778 CVE-2026-30778 is a vulnerability in Apache SkyWalking versions 9.7.0 through 10.3.0 where the /debugging/config/dump endpoint may expose sensitive configuration information related to MySQL and PostgreSQL databases. This exposure can lead to unauthorized access to critical configuration data. The issue is resolved in Apache SkyWalking version 10.4.0, which users are advised to upgrade to. The vulnerability has a CVSS score of 7. EPSS 0.5%Vulnerability Apache Software Foundation CWE-202	CVE Database V5	2026-04-15
Medium	6.1	EPSS 0.8%	CVE-2025-54057Apache SkyWalking · Basic XSS Medium6.1EPSS 0.8%2025-11-27CVE Database V5CVE-2025-54057 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking. This issue affects Apache SkyWalking: <= 10.2.0. Users are recommended to upgrade to version 10.3.0, which fixes the issue. EPSS 0.8%Vulnerability Apache Software Foundation CWE-80	CVE Database V5	2025-11-27

Page 1 of 1