You can find out about our security policy and VictoriaMetrics version support on the security page in the documentation.
Repository navigation
Security: VictoriaMetrics/VictoriaMetrics
Security
SECURITY.md
-
vmrestore: path traversal via crafted backup part names escapes restore rootGHSA-8q3c-rjr9-xxrp published
Jul 13, 2026 by arkid15rModerate -
Missing Brute Force ProtectionGHSA-c7pm-322g-r9gf published
Aug 31, 2026 by makasimHigh -
Snappy Decoder DoS Vulnerability Causing OOMGHSA-66jq-2c23-2xh5 published
Nov 25, 2025 by arkid15rLow
Learn more about advisories related to VictoriaMetrics/VictoriaMetrics in the GitHub Advisory Database