155 matches found
EUVD-2026-92090
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function getenvironment of the file goldenverba/components/util.py of the component generatestream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attack...
CVE-2026-105145
A vulnerability exists in Weaviate Verba up to version 2.1.3 within the generate_stream endpoint. Specifically, the get_environment function in the file goldenverba/components/util.py is affected, allowing for information disclosure through manipulation. This vulnerability can be exploited remote...
PT-2026-104620
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get environment of the file goldenverba/components/util.py of the component generate stream Endpoint. The manipulation leads to information disclosure. It is possible to initiate the attac...
ai-kubernetes-helm-chart-security
Kubernetes上のAI: Helmチャートのセキュリティデフォルト（エビデンス） このリポジトリには、Soramiの技術レポート「Kubernetes上のAI: 14個のHelmチャートのうち10個がAPI認証なしで提供されている」（バージョン1.2）の背景となるデータとエビデンスが含まれています。 レポートはこちら: https://sorami.com.au/research/ai-kubernetes-helm-chart-security/...
CLEANSTART-2026-LJ43739 HashiCorp memberlist before version 0
Multiple security vulnerabilities affect the weaviate-fips package. HashiCorp memberlist before version 0. See references for individual vulnerability details...
CLEANSTART-2026-QN49433 HashiCorp memberlist before version 0
Multiple security vulnerabilities affect the weaviate-fips package. HashiCorp memberlist before version 0. See references for individual vulnerability details...
SUSE CVE-2026-11500
A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the component Static API Key Handler. The manipulation of the argument StaticApiKey leads to authorization bypass. It is...
CLEANSTART-2026-DO87068 Security fixes in weaviate-fips 1.38.10-r2
Package weaviate-fips version 1.38.10-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-KP84275 Security fixes in weaviate-fips 1.38.11-r2
Package weaviate-fips version 1.38.11-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-PY20698 Security fixes in weaviate-fips 1.38.10-r1
Package weaviate-fips version 1.38.10-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-LL73757 Security fixes in weaviate-fips 1.38.11-r1
Package weaviate-fips version 1.38.11-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
GO-2026-6140 Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate...
PT-2026-80384
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate...
GO-2025-3987 vulnerabilities
Vulnerabilities for packages: weaviate, hydra-fips, hydra...
GO-2025-3987 vulnerabilities
Vulnerabilities for packages: weaviate, hydra...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: maru, vcluster, lazygit, loki, dagger, datadog-agent, grafana-alloy, nfpm, teleport, opentelemetry-collector, terragrunt, tempo, malcontent, grafana, k3s, kubevela, redpanda, dgraph, goreleaser, weaviate, gitlab-runner, eksctl, cri-tools, prometheus, minio,...
CLEANSTART-2026-IW23752 Security fixes in weaviate-fips 1.38.6-r1
Package weaviate-fips version 1.38.6-r1 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-46600, ghsa-259r-337f-4rfw...
CLEANSTART-2026-PA01765 Security fixes in weaviate-fips 1.37.13-r1
Package weaviate-fips version 1.37.13-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...