Lucene search
+L

27 matches found

Snyk
Snyk
added 2026/06/08 4:8 a.m.10 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/08 4:8 a.m.8 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/08 4:8 a.m.8 views

Use of Weak Hash

Overview Affected versions of this package are vulnerable to Use of Weak Hash in the chunker.go process of the Qdrant Backend. An attacker can compromise data integrity or availability by exploiting the use of a weak hash algorithm in remote scenarios with low privileges and high attack complexit...

4.2CVSS6AI score0.0016EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2026/06/08 3:47 a.m.8 views

grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument contenthash can lead to use of weak hash. T...

2.5CVSS5.2AI score0.00082EPSS
SaveExploits0References9Affected Software1
NVD
NVD
added 2026/06/08 3:16 a.m.16 views

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS0.0016EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/06/08 2:15 a.m.14 views

CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.7AI score0.0016EPSS
SaveExploits0References7Affected Software1
CVE
CVE
added 2026/06/08 2:15 a.m.76 views

CVE-2026-11479

CVE-2026-11479 affects yoanbernabeu grepai 0.35.0, specifically the Qdrant Backend component’s file indexer/chunker.go. The issue involves manipulation that leads to use of a weak hash, enabling a remote attack. Exploitation is described as difficult, with network attack vector and low privileges...

4.2CVSS4.8AI score0.0016EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/06/08 2:15 a.m.56 views

CVE-2026-11479 yoanbernabeu grepai Qdrant Backend chunker.go weak hash

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS0.0016EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/06/08 2:15 a.m.29 views

EUVD-2026-35010

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.7AI score0.0016EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/06/08 12:0 a.m.29 views

PT-2026-47241

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

4.2CVSS4.7AI score0.0016EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/06/08 12:0 a.m.26 views

PT-2026-47243

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content hash can lead to use of weak hash...

2.5CVSS4.5AI score0.00082EPSS
SaveExploits0References8
Snyk
Snyk
added 2026/03/11 6:26 a.m.3 views

Malicious Package

Overview vite-chunker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/03/11 6:26 a.m.4 views

MAL-2026-1338 Malicious code in vite-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8c2fc92377d678aca4ddaeaf13ff2c9a3fe7da1e436478d49b935131562f58 The package vite-chunker was found to contain malicious code. Source: ghsa-malware 77cc8d4b3c8ab1dac6606515127cb65f5c6738fb43b9d6a7800351162e689059 A...

5.7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/11 6:26 a.m.9 views

Malicious code in vite-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8c2fc92377d678aca4ddaeaf13ff2c9a3fe7da1e436478d49b935131562f58 The package vite-chunker was found to contain malicious code. Source: ghsa-malware 77cc8d4b3c8ab1dac6606515127cb65f5c6738fb43b9d6a7800351162e689059 A...

5.7AI score
SaveExploits0References1
Snyk
Snyk
added 2025/10/28 1:44 a.m.2 views

Malicious Package

Overview vite-manual-chunker is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/28 1:44 a.m.8 views

Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References4
OSV
OSV
added 2025/10/28 1:44 a.m.7 views

MAL-2025-48914 Malicious code in vite-manual-chunker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2466db729b423d58b084a5f99834cfaf8c62af4179350ef30978e32f36b50fa7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References4
EUVD
EUVD
added 2025/10/28 1:44 a.m.4 views

EUVD-2025-36420

Malicious code in vite-manual-chunker npm...

6.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/23 7:50 p.m.5 views

Malicious code in vite-react-chunker (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References2
OSV
OSV
added 2025/10/23 7:50 p.m.4 views

MAL-2025-48885 Malicious code in vite-react-chunker (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0References2
Rows per page
Query Builder