{"action":"Upgrade github.com/seaweedfs/seaweedfs to 0.0.0-20260512171120-69da20bdaec9 or later.","affected":[{"introduced":"0"}],"component":"github.com/seaweedfs/seaweedfs","cve_ids":["CVE-2026-73080"],"ecosystem":"Go","epss":0.00527,"exploited":false,"fixed_versions":["0.0.0-20260512171120-69da20bdaec9"],"ghsa_id":"GHSA-87fv-vqqr-m4jr","id":"tcs_01M5KF3ADJFW3X3XBSW9QZ2H32","modified_at":"2026-08-18T15:11:03.487858095Z","published_at":"2026-08-11T15:58:23Z","references":["https://osv.dev/vulnerability/GHSA-87fv-vqqr-m4jr","https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-87fv-vqqr-m4jr","https://github.com/seaweedfs/seaweedfs/pull/9441","https://github.com/seaweedfs/seaweedfs/commit/69da20bdaec923e5a43d8aa71bf3c0a2051fc019","https://github.com/seaweedfs/seaweedfs","https://github.com/seaweedfs/seaweedfs/releases/tag/4.24"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-87fv-vqqr-m4jr","url":"https://osv.dev/vulnerability/GHSA-87fv-vqqr-m4jr"}],"summary":"SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle"}