Go/github.com/seaweedfs/seaweedfs CVE-2026-73080: critical 9.3, EPSS 0.53%

SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle

Action: Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260512171120-69da20bdaec9 or later.

go get github.com/seaweedfs/seaweedfs@v0.0.0-20260512171120-69da20bdaec9

Affected

Fixed versions

Sources

• osv: GHSA-87fv-vqqr-m4jr
• https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-87fv-vqqr-m4jr
• https://github.com/seaweedfs/seaweedfs/pull/9441
• https://github.com/seaweedfs/seaweedfs/commit/69da20bdaec923e5a43d8aa71bf3c0a2051fc019
• https://github.com/seaweedfs/seaweedfs
• https://github.com/seaweedfs/seaweedfs/releases/tag/4.24

CVE-2026-73080 · published 2026-08-11T15:58:23Z · modified 2026-08-18T15:11:03.487858095Z · JSON