211 matches found
CVE-2024-3829
CVE-2024-3829 for Qdrant - Exploit THIS IS AN EXPLOIT FOR CVE-2024-3829 IN QDRANT 1.9.0-dev | || | | || | | || || || | | | | | | | | || | | || || || | | || | | || || || | | | | || | | || | | | | || || | || | || | | | | || ||| | || | | || || | | || || | | || || || || | | || | | || || | | | | | | |...
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
GHSA-2MJX-QC3C-RQVC vulnerabilities
Vulnerabilities for packages: qdrant, ntpd-rs, linkerd2-proxy, xh, zizmor, vector, zola, lychee, pixi, zed, cargo-audit, zellij, wadm, samply, deno, tealdeer, linkerd-network-validator, kdash, pnpm, shadowsocks-rust, sdp-k8s-injector, sccache...
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: lakekeeper, vector, garage, pnpm, nushell, atuin, parseable, qdrant, deno, workmux, zed, bootc...
GHSA-6G2R-675J-HX59 vulnerabilities
Vulnerabilities for packages: atuin, parseable, qdrant, pnpm, zed, nushell, vector, deno...
PYSEC-2026-4125 Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...
PT-2026-105864
Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...
PT-2026-105874
Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...
CLEANSTART-2026-MR36651 Vitest is a testing framework powered by Vite
Security vulnerability affects the qdrant package. Vitest is a testing framework powered by Vite...
CLEANSTART-2026-NW83834 Browserslist is a configuration tool for sharing target browsers and Node
Security vulnerability affects the qdrant package. Browserslist is a configuration tool for sharing target browsers and Node...
CLEANSTART-2026-EK72543 nanoid (Nano ID) before 5
Security vulnerability affects the qdrant package. nanoid Nano ID before 5...
CLEANSTART-2026-PJ72615 js-yaml is a JavaScript YAML parser and dumper
Security vulnerability affects the qdrant package. js-yaml is a JavaScript YAML parser and dumper...
CLEANSTART-2026-WC95670 nanoid (Nano ID) before 3
Security vulnerability affects the qdrant package. nanoid Nano ID before 3...
CLEANSTART-2026-BX79488 Vitest is a testing framework powered by Vite
Security vulnerability affects the qdrant package. Vitest is a testing framework powered by Vite...
CLEANSTART-2026-HR55516 nanoid is a secure, URL-friendly, unique string ID generator for JavaScript
Security vulnerability affects the qdrant package. nanoid is a secure, URL-friendly, unique string ID generator for JavaScript...
CLEANSTART-2026-YT00725 baseline-browser-mapping 2
Security vulnerability affects the qdrant package. baseline-browser-mapping 2...
CLEANSTART-2026-BT23660 Browserslist is a configuration tool for sharing target browsers and Node
Security vulnerability affects the qdrant package. Browserslist is a configuration tool for sharing target browsers and Node...
PT-2026-105230
Security vulnerability affects the qdrant package. nanoid is a secure, URL-friendly, unique string ID generator for JavaScript...