{"action":"Upgrade github.com/vouch/vouch-proxy to 0.48.0 or later.","affected":[{"fixed":"0.48.0","introduced":"0"}],"component":"github.com/vouch/vouch-proxy","cve_ids":["CVE-2026-55149"],"ecosystem":"Go","epss":0.00718,"exploited":false,"fixed_versions":["0.48.0"],"ghsa_id":"GHSA-qqff-5854-px68","id":"tcs_01M5KFKC1ZD733SZNE7NDAPEMQ","modified_at":"2026-08-26T01:21:46.632746820Z","published_at":"2026-08-20T17:26:39Z","references":["https://osv.dev/vulnerability/GHSA-qqff-5854-px68","https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68","https://github.com/vouch/vouch-proxy/commit/fa18ce30ba50a4863a436acad044c22965329c4f","https://github.com/vouch/vouch-proxy","https://github.com/vouch/vouch-proxy/releases/tag/v0.48.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qqff-5854-px68","url":"https://osv.dev/vulnerability/GHSA-qqff-5854-px68"}],"summary":"vouch-proxy has an Unbounded Multipart Cookie Allocation DoS"}