GO-2025-4161
NoneCVSS
—
EPSS
—
Published
Dec 15, 2025
CISA due date
—
The record
VictoriaMetrics' Snappy Decoder DoS Vulnerability is Causing OOM in github.com/VictoriaMetrics/VictoriaMetrics
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/VictoriaMetrics/VictoriaMetrics | 0 | 1.110.23 |
| Go | github.com/VictoriaMetrics/VictoriaMetrics | 1.0.0 | 1.110.23 |
| Go | github.com/VictoriaMetrics/VictoriaMetrics | 1.111.0 | 1.122.8 |
| Go | github.com/VictoriaMetrics/VictoriaMetrics | 1.123.0 | 1.129.1 |
| Chainguard | victoriametrics-operator-fips | 0 | 0.65.0-r2 |
| go | github.com/VictoriaMetrics/VictoriaMetrics | 1.0.0 | 1.110.23 |
| go | github.com/VictoriaMetrics/VictoriaMetrics | 1.111.0 | 1.122.8 |
| go | github.com/VictoriaMetrics/VictoriaMetrics | 1.123.0 | 1.129.1 |