CVE-2025-8865Medium 4.1The YugabyteDB tablet server contains a flaw in its YCQL query handling that can trigger a null pointer dereference when processing certain malformed inputs. An authenticated attacker could exploit th0.2%
CVE-2025-8863High 7.0YugabyteDB diagnostic information was transmitted over HTTP, which could expose sensitive data during transmission0.3%
CVE-2025-8862High 7.0YugabyteDB has been collecting diagnostics information from YugabyteDB servers, which may include sensitive gflag configurations. To mitigate this, we recommend upgrading the database to a version whe0.4%