github.com/VictoriaMetrics/VictoriaMetrics vulnerabilities
CVEs whose affected-version data names the github.com/VictoriaMetrics/VictoriaMetrics package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-61625Medium· 6.8VictoriaMetrics is a scalable solution for monitoring and managing time series data
VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/bac…
▾ SunlitVictoriaMetrics · github.com/VictoriaMetrics/VictoriaMetricsEPSS 0.30%via NVD
CVE-2025-65942Low· 2.7VictoriaMetrics' Snappy Decoder DoS Vulnerability is Causing OOM
VictoriaMetrics' Snappy Decoder DoS Vulnerability is Causing OOM
▾ SunlitVictoriaMetrics · github.com/VictoriaMetrics/VictoriaMetricsEPSS 0.34%via OSV