Apache Software Foundation Apache SkyWalking

• CVE-2026-85229 Medium 6.1 Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057) 0.3%
• CVE-2026-71216 Medium 5.3 Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP 0.2%
• CVE-2026-30778 High 7.5 Apache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL. 0.5%
• CVE-2025-54057 Medium 6.1 Apache SkyWalking: Stored XSS vulnerability 0.8%