Skip to content
OpenAdvisories

Package · Go

github.com/VictoriaMetrics/VictoriaMetrics

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.8
    CVE-2026-61625

    VictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root

    VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go…

    VictoriaMetrics VictoriaMetrics github.com/VictoriaMetrics/VictoriaMetrics Go
  • Low 2.7
    CVE-2025-65942

    VictoriaMetrics Snappy Decoder DoS Vulnerability is Causing OOM

    VictoriaMetrics is a scalable solution for monitoring and managing time series data. In versions from 1.0.0 to before 1.110.23, from 1.111.0 to before 1.122.8, and from 1.123.0 to before 1.129.1, affected versions are vulnerable to DoS attacks because the sna…

    VictoriaMetrics VictoriaMetrics github.com/VictoriaMetrics/VictoriaMetrics Go