{"id":"GO-2025-4033","revision":"4a64d5f944b84f9890add9e783384b28","records":[{"revision":"4a64d5f944b84f9890add9e783384b28","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4033","aliases":["CVE-2025-61581","GHSA-9m49-p2j3-c6xm"],"title":"Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability in github.com/apache/trafficcontrol","description":"Apache Traffic Control has an Inefficient Regular Expression Complexity vulnerability in github.com/apache/trafficcontrol","state":0,"publishedAt":"2025-10-30T15:02:33+00:00","modifiedAt":"2026-03-03T04:57:00.438101+00:00","affected":[{"ecosystem":"Go","name":"github.com/apache/trafficcontrol","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"github.com/apache/trafficcontrol/v8","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-9m49-p2j3-c6xm","https://nvd.nist.gov/vuln/detail/CVE-2025-61581","https://lists.apache.org/thread/mx2jxgnlop2f4vbqnvmrldh4pqmobxvp"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4033","license":"OSV · upstream source license applies","key":"osv:GO-2025-4033","identifiers":["GO-2025-4033","CVE-2025-61581","GHSA-9m49-p2j3-c6xm"]},"retained":false,"historicalAffected":[]}],"coverage":[]}