MINI-J2G6-GWC3-36JJ

Bulletin has no description...

MINI-53RR-RXGF-G8H7

Bulletin has no description...

GHSA-JH6H-V6MP-H22V milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kvcatalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The...

MINI-698V-HX2W-7H3H

Bulletin has no description...

CVE-2026-43986

creationtimestamp| type| source ---|---|--- 2026-06-04 18:05:50+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mni7mj5dvi25 2026-06-04 23:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mniq3rzwzs22...

MINI-HP9H-R4VH-FX8V

Bulletin has no description...

MINI-RV8V-X5JG-5283

Bulletin has no description...

MINI-8QR3-8G6P-48MJ

Bulletin has no description...

MINI-Q6MV-FQGC-CJRV

Bulletin has no description...

MINI-J952-FQW8-FRC8

Bulletin has no description...

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash via the grantee ID hashing logic. An attacker can make two different RBAC grantee records map to the same truncated identifier by creating or renaming roles and collections whose metadata is hashed into the 16-hex...

MINI-7J3P-3236-PGC9

Bulletin has no description...

MINI-Q92X-W4FC-9CWQ

Bulletin has no description...

MINI-6RMF-8V2V-GQG8

Bulletin has no description...

MINI-C9MH-H966-Q852

Bulletin has no description...

MINI-6JJF-6XHV-C3HM

Bulletin has no description...

GHSA-RXV8-25V2-QMQ8

creationtimestamp| type| source ---|---|--- 2026-06-04 15:40:51+00:00| seen| https://gist.github.com/alon710/3d94838c8c562b52d8cc99e4e0d339c7...

CVE-2026-40605

creationtimestamp| type| source ---|---|--- 2026-06-04 15:02:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnhvehyugn2b...

CVE-2026-10814 milvus-io milvus Grantee ID Hash kv_catalog.go weak hash

A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kvcatalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The...

EUVD-2026-34292

A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kvcatalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack needs to be performed locally. The...