{"action":"Upgrade github.com/vouch/vouch-proxy to 0.48.0 or later.","affected":[{"fixed":"0.48.0","introduced":"0"}],"component":"github.com/vouch/vouch-proxy","cve_ids":["CVE-2026-55149"],"ecosystem":"Go","epss":0.00718,"exploited":false,"fixed_versions":["0.48.0"],"ghsa_id":"GHSA-qqff-5854-px68","id":"tcs_01M5KGSQVNAYSE5W484B2CEW8T","modified_at":"2026-08-26T01:21:40.783300254Z","published_at":"2026-08-25T19:43:10Z","references":["https://osv.dev/vulnerability/GO-2026-6260","https://github.com/vouch/vouch-proxy/security/advisories/GHSA-qqff-5854-px68","https://github.com/vouch/vouch-proxy/commit/fa18ce30ba50a4863a436acad044c22965329c4f","https://github.com/vouch/vouch-proxy/releases/tag/v0.48.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6260","url":"https://osv.dev/vulnerability/GO-2026-6260"}],"summary":"vouch-proxy has an Unbounded Multipart Cookie Allocation DoS in github.com/vouch/vouch-proxy"}