Skip to content

Known vulnerabilities in Apache Software Foundation Apache SkyWalking

Is your version affected?

CVE Summary Score Published
CVE-2026-85229 ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of input during web page generation ('cross-site scripting')… Not rated Sep 4, 2026
CVE-2026-71216 PagerDuty alarm hook transmits the integration routing key over cleartext HTTP Not rated Sep 4, 2026
CVE-2026-30778 The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL Not rated Apr 15, 2026
CVE-2025-54057 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache SkyWalking Not rated Nov 27, 2025

Other Apache Software Foundation products