Skip to content
OpenAdvisories

Package · Go

github.com/VictoriaMetrics/VictoriaMetrics

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-61625

    VictoriaMetrics vmrestore: path traversal via crafted backup part names escapes restore root

    VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go…

    VictoriaMetrics VictoriaMetrics github.com/VictoriaMetrics/VictoriaMetrics Go