176 matches found
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
CLEANSTART-2026-MJ34936 Security fix for GHSA-8wmf-6v46-5gfg applied in: weaviate-fips 1.38.19-r3, weaviate-fips 1.39.10-r1
GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KO77933 Security fix for GHSA-8wmf-6v46-5gfg applied in: weaviate-fips 1.38.18-r1
Security vulnerability affects the weaviate-fips package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2026-105145
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...
CVE-2026-105145 Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...
EUVD-2026-92090
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...
CVE-2026-105145
A vulnerability exists in Weaviate Verba up to version 2.1.3 within the generate_stream endpoint. Specifically, the get_environment function in the file goldenverba/components/util.py is affected, allowing for information disclosure through manipulation. This vulnerability can be exploited remote...
CVE-2026-105145 Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...
CVE-2026-105145: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...
PT-2026-104620
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get environment of the file goldenverba/components/util.py of the component generate stream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attac...
PT-2026-105874
Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...
CLEANSTART-2026-LJ43739 HashiCorp memberlist before version 0
Multiple security vulnerabilities affect the weaviate-fips package. HashiCorp memberlist before version 0. See references for individual vulnerability details...
CLEANSTART-2026-QN49433 HashiCorp memberlist before version 0
Multiple security vulnerabilities affect the weaviate-fips package. HashiCorp memberlist before version 0. See references for individual vulnerability details...
SUSE CVE-2026-11500
A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the component Static API Key Handler. The manipulation of the argument StaticApiKey leads to authorization bypass. It is...
CLEANSTART-2026-PY20698 Security fixes in weaviate-fips 1.38.10-r1
Package weaviate-fips version 1.38.10-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-KP84275 Security fixes in weaviate-fips 1.38.11-r2
Package weaviate-fips version 1.38.11-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-DO87068 Security fixes in weaviate-fips 1.38.10-r2
Package weaviate-fips version 1.38.10-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-LL73757 Security fixes in weaviate-fips 1.38.11-r1
Package weaviate-fips version 1.38.11-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
