High severity7.5NVD Advisory· Published Apr 15, 2026· Updated Apr 20, 2026
CVE-2026-30778
CVE-2026-30778
Description
The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.
This issue affects Apache SkyWalking: from 9.7.0 through 10.3.0.
Users are recommended to upgrade to version 10.4.0, which fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.skywalking:server-coreMaven | >= 9.7.0, < 10.4.0 | 10.4.0 |
Affected products
2Patches
Vulnerability mechanics
References
5- www.openwall.com/lists/oss-security/2026/04/15/2nvdMailing ListThird Party AdvisoryWEB
- github.com/advisories/GHSA-27h3-crw2-q36wghsaADVISORY
- lists.apache.org/thread/pvf35o3tp1rqhmrhzj6fg31gvqrqcvn3nvdMailing ListVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2026-30778ghsaADVISORY
- github.com/apache/skywalking/commit/5a3f6260e4dd681a9132204e5299064bef079886ghsaWEB
News mentions
0No linked articles in our index yet.