CVE-2024-3829

CVE-2024-3829 pour Qdrant - Exploit THIS IS AN EXPLOIT FOR CVE-2024-3829 IN QDRANT 1.9.0-dev | || | | || | | || || || | | | | | | | | || | | || || || | | || | | || || || | | | | || | | || | | | | || || | || | || | | | | || ||| | || | | || || | | || || | | || || || || | | || | | || || | | | | | | ...

GHSA-2MJX-QC3C-RQVC vulnerabilities

Vulnerabilities for packages: deno, zola, sccache, pnpm, cargo-audit, sdp-k8s-injector, xh, ntpd-rs, linkerd2-proxy, pixi, qdrant, tealdeer...

ai-kubernetes-helm-chart-security

AI в Kubernetes: безопасность Helm-чартов по умолчанию доказательства Этот репозиторий содержит данные и доказательства, лежащие в основе технического отчёта Sorami «AI в Kubernetes: 10 из 14 Helm-чартов поставляются без аутентификации API» версия 1.2. Читайте отчёт здесь:...

GHSA-6G2R-675J-HX59 vulnerabilities

Vulnerabilities for packages: workmux, deno, garage, lakekeeper, parseable, nushell, pnpm, qdrant, zed, atuin, bootc...

GHSA-6G2R-675J-HX59 vulnerabilities

Vulnerabilities for packages: atuin, deno, parseable, nushell, pnpm, zed, qdrant...

CLEANSTART-2026-BT23660 Browserslist is a configuration tool for sharing target browsers and Node

Security vulnerability affects the qdrant package. Browserslist is a configuration tool for sharing target browsers and Node...

CLEANSTART-2026-PJ72615 js-yaml is a JavaScript YAML parser and dumper

Security vulnerability affects the qdrant package. js-yaml is a JavaScript YAML parser and dumper...

CLEANSTART-2026-YT00725 baseline-browser-mapping 2

Security vulnerability affects the qdrant package. baseline-browser-mapping 2...

CLEANSTART-2026-WC95670 nanoid (Nano ID) before 3

Security vulnerability affects the qdrant package. nanoid Nano ID before 3...

CLEANSTART-2026-BX79488 Vitest is a testing framework powered by Vite

Security vulnerability affects the qdrant package. Vitest is a testing framework powered by Vite...

CLEANSTART-2026-HR55516 nanoid is a secure, URL-friendly, unique string ID generator for JavaScript

Security vulnerability affects the qdrant package. nanoid is a secure, URL-friendly, unique string ID generator for JavaScript...

CLEANSTART-2026-NW83834 Browserslist is a configuration tool for sharing target browsers and Node

Security vulnerability affects the qdrant package. Browserslist is a configuration tool for sharing target browsers and Node...

CLEANSTART-2026-EK72543 nanoid (Nano ID) before 5

Security vulnerability affects the qdrant package. nanoid Nano ID before 5...

PT-2026-105247

Security vulnerability affects the qdrant package. js-yaml is a JavaScript YAML parser and dumper...

PT-2026-105224

Security vulnerability affects the qdrant package. nanoid Nano ID before 5...

Incorrect Authorization

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization in the knowledge base delete handler process. An attacker can remove instance-wide configuration managed by administrators by sending a DELETE request to the relevant API endpoint with...

nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

SummaryThe POST /webhooks/nextcloud endpoint has no authentication by default: WEBHOOKSECRET defaults to None and is never required by startup validation. When unset, the receiver accepts any unauthenticated POST. The userid is taken directly from the attacker-supplied payload and passed to Qdran...

PYSEC-2026-3866 nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

Summary The POST /webhooks/nextcloud endpoint has no authentication by default: WEBHOOKSECRET defaults to None and is never required by startup validation. When unset, the receiver accepts any unauthenticated POST. The userid is taken directly from the attacker-supplied payload and passed to...

SUSE CVE-2026-11479

A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file indexer/chunker.go of the component Qdrant Backend. Such manipulation leads to use of weak hash. The attack may be performed from remote. Attacks of this nature are highly complex...

nextcloud-mcp-server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )

Summary The POST /webhooks/nextcloud endpoint has no authentication by default: WEBHOOKSECRET defaults to None and is never required by startup validation. When unset, the receiver accepts any unauthenticated POST. The userid is taken directly from the attacker-supplied payload and passed to...