Malicious Package

Overview qdrant-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-426 Malicious code in qdrant-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad84f3d1657583a0a6fa9d58b06258298369ea5e4ee10ac0516c3f641b33871 The package qdrant-js was found to contain malicious code. Source: ghsa-malware 789e158c461e8c11f86da5b04f09dab1797536199084bf548efc2f3ee13b33f1 Any...

EUVD-2024-31684

Malicious code in bioql PyPI...

EUVD-2024-2207

Malicious code in bioql PyPI...

EUVD-2023-42734

Malicious code in bioql PyPI...

Malicious code in qdrant-node-js-basic-example (npm)

The package qdrant-node-js-basic-example was found to contain malicious code...

MAL-2025-30999 Malicious code in qdrant-node-js-basic-example (npm)

The package qdrant-node-js-basic-example was found to contain malicious code...

CVE-2024-3078

A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical. This issue affects some unknown processing of the file lib/collection/src/collection/snapshots.rs of the component Full Snapshot REST API. The manipulation leads to path traversal. Upgrading to version 1.8.3 i...

CVE-2023-38975

Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnkedvectors.rs component...

CVE-2024-3829

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

CVE-2024-3584

qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the /collections/name/snapshots/upload endpoint. By manipulating the name parameter through URL encoding, an attacker can upload a file to an arbitrary location on the system, such as /root/poc.txt...

CVE-2024-2221

qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the /collections/COLLECTION/snapshots/upload endpoint, specifically through the snapshot parameter. This vulnerability allows attackers to upload and overwrite any file on the filesystem, leading to...

GHSA-GW5W-5J7F-JMJJ vulnerabilities

Vulnerabilities for packages: qdrant...

GHSA-QG5G-GV98-5FFH vulnerabilities

Vulnerabilities for packages: tealdeer, fnm, xh, pixi, zed, qdrant, wasm-pack, ntpd-rs, cargo-audit, uv, parseable, wash, wasmcloud, wadm...

GHSA-VR26-JCQ5-FJJ8 vulnerabilities

Vulnerabilities for packages: pixi, qdrant, uv, wash, wasmcloud...

GHSA-C2HF-VCMR-QJRF vulnerabilities

Vulnerabilities for packages: parseable, qdrant...

CVE-2024-41178 vulnerabilities

Vulnerabilities for packages: parseable, qdrant...

The vulnerability of the Qdrant artificial intelligence-based vector search system lies in the insufficient verification of input data, allowing attackers to write arbitrary files.

The vulnerability of the Qdrant artificial intelligence-based vector search system is related to an incorrect restriction on the path name for the restricted catalog, due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to write arbitrary files by...

qdrant input validation failure

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

GHSA-7M75-X27W-R52R qdrant input validation failure

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...