{"id":"GO-2026-6159","revision":"8948173559c04a1eb8e5a8503040312a","records":[{"revision":"8948173559c04a1eb8e5a8503040312a","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6159","aliases":["CVE-2026-52857","GHSA-q6hh-gp44-4hcm"],"title":"Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM in github.com/pterodactyl/wings","description":"Wings: Maliciously or erroneously created parsed config files can cause wings process to OOM in github.com/pterodactyl/wings","state":0,"publishedAt":"2026-08-18T14:32:29+00:00","modifiedAt":"2026-08-18T15:00:17.5958975+00:00","affected":[{"ecosystem":"Go","name":"github.com/pterodactyl/wings","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.13.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/pterodactyl/wings/security/advisories/GHSA-q6hh-gp44-4hcm","https://github.com/pterodactyl/wings/commit/5f71f65711b6b9e6f913bec94a7b36d9a5eaae49","https://github.com/pterodactyl/wings/releases/tag/v1.13.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6159","license":"OSV · upstream source license applies","key":"osv:GO-2026-6159","identifiers":["GO-2026-6159","CVE-2026-52857","GHSA-q6hh-gp44-4hcm"]},"retained":false,"historicalAffected":[]}],"coverage":[]}