{"id":"GO-2026-6489","revision":"cd51fd0fc01b421e87fdbad6738b64f7","records":[{"revision":"cd51fd0fc01b421e87fdbad6738b64f7","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6489","aliases":["CVE-2026-82410","GHSA-84vh-m24q-wjjx"],"title":"Pocketbase: Unhandled panic in worker goroutines in github.com/pocketbase/pocketbase","description":"Pocketbase: Unhandled panic in worker goroutines in github.com/pocketbase/pocketbase","state":0,"publishedAt":"2026-10-07T14:10:35+00:00","modifiedAt":"2026-10-07T17:45:12.8182707+00:00","affected":[{"ecosystem":"Go","name":"github.com/pocketbase/pocketbase","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.22.48"},{"kind":"introduced","version":"0.23.0"},{"kind":"fixed","version":"0.39.7"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/pocketbase/pocketbase/security/advisories/GHSA-84vh-m24q-wjjx","https://github.com/pocketbase/pocketbase/commit/30b4184305904fae0d1b78216c4e3cc34700b220","https://github.com/pocketbase/pocketbase/commit/f1618ee59b6d1c0308bb474c827a2b1f24b12a95","https://github.com/pocketbase/pocketbase/discussions/7762","https://github.com/pocketbase/pocketbase/releases/tag/v0.22.48","https://github.com/pocketbase/pocketbase/releases/tag/v0.39.7"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6489","license":"OSV · upstream source license applies","key":"osv:GO-2026-6489","identifiers":["GO-2026-6489","CVE-2026-82410","GHSA-84vh-m24q-wjjx"]},"retained":false,"historicalAffected":[]}],"coverage":[]}