{"id":"GO-2025-4161","revision":"d063309baabc443cbe5be62deccee719","records":[{"revision":"d063309baabc443cbe5be62deccee719","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4161","aliases":["CVE-2025-65942","GHSA-66jq-2c23-2xh5"],"title":"VictoriaMetrics' Snappy Decoder DoS Vulnerability is Causing OOM in github.com/VictoriaMetrics/VictoriaMetrics","description":"VictoriaMetrics' Snappy Decoder DoS Vulnerability is Causing OOM in github.com/VictoriaMetrics/VictoriaMetrics","state":0,"publishedAt":"2025-12-15T20:37:41+00:00","modifiedAt":"2026-02-04T03:01:32.282457+00:00","affected":[{"ecosystem":"Go","name":"github.com/VictoriaMetrics/VictoriaMetrics","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.110.23"},{"kind":"introduced","version":"1.111.0"},{"kind":"fixed","version":"1.122.8"},{"kind":"introduced","version":"1.123.0"},{"kind":"fixed","version":"1.129.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/VictoriaMetrics/VictoriaMetrics/security/advisories/GHSA-66jq-2c23-2xh5","https://github.com/VictoriaMetrics/VictoriaMetrics/commit/51b44afd34d2c9a392d4ebedeeb5b4a7f5beca24","https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.110.23","https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.122.8","https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.129.1"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4161","license":"OSV · upstream source license applies","key":"osv:GO-2025-4161","identifiers":["GO-2025-4161","CVE-2025-65942","GHSA-66jq-2c23-2xh5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}