203 matches found
CVE-2024-3829
CVE-2024-3829 for Qdrant - Exploit THIS IS AN EXPLOIT FOR CVE-2024-3829 IN QDRANT 1.9.0-dev | || | | || | | || || || | | | | | | | | || | | || || || | | || | | || || || | | | | || | | || | | | | || || | || | || | | | | || ||| | || | | || || | | || || | | || || || || | | || | | || || | | | | | | |...
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
CLEANSTART-2026-PF79471 Vitest is a Vite-native testing framework for JavaScript and TypeScript projects
Security vulnerability affects the qdrant package. Vitest is a Vite-native testing framework for JavaScript and TypeScript projects...
CLEANSTART-2026-SR47251 Vite is a frontend tooling framework for JavaScript
Security vulnerability affects the qdrant package. Vite is a frontend tooling framework for JavaScript...
CLEANSTART-2026-VF31820 Vite is a frontend tooling framework for JavaScript
Security vulnerability affects the qdrant package. Vite is a frontend tooling framework for JavaScript...
CLEANSTART-2026-XW44209 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the qdrant package. launch-editor allows users to open files with line numbers in editor from Node...
CLEANSTART-2026-XL56963 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the qdrant package. launch-editor allows users to open files with line numbers in editor from Node...
CLEANSTART-2026-BH80577 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the qdrant package. launch-editor allows users to open files with line numbers in editor from Node...
CLEANSTART-2026-QD20140 Tinypool is a minimal Node
Security vulnerability affects the qdrant package. Tinypool is a minimal Node...
CLEANSTART-2026-CU25546 Tinypool is a minimal Node
Security vulnerability affects the qdrant package. Tinypool is a minimal Node...
CLEANSTART-2026-XQ99685 Vitest is a testing framework powered by Vite
Security vulnerability affects the qdrant package. Vitest is a testing framework powered by Vite...
CLEANSTART-2026-FZ26906 source-map-js through 1
Security vulnerability affects the qdrant package. source-map-js through 1...
GHSA-2MJX-QC3C-RQVC vulnerabilities
Vulnerabilities for packages: tealdeer, samply, linkerd-network-validator, shadowsocks-rust, xh, zola, vector, zellij, zizmor, pixi, sccache, kdash, lychee, sdp-k8s-injector, linkerd2-proxy, pnpm, ntpd-rs, cargo-audit, qdrant, wadm, zed, deno...
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: qdrant, pnpm, atuin, nushell, parseable, vector, deno, lakekeeper, bootc, zed, garage, workmux...
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: nushell, qdrant, pnpm, atuin, parseable, zed, deno, vector...
PYSEC-2026-4125 Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...
PT-2026-105864
Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...
PT-2026-105874
Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...