184 matches found
PT-2026-4834
Name of the Vulnerable Software and Affected Versions AnythingLLM versions prior to 1.10.0 Description AnythingLLM is an application that converts content into context for use with Large Language Models LLMs. If configured to use Qdrant as the vector database with an API key, versions prior to...
Malicious code in qdrant-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad84f3d1657583a0a6fa9d58b06258298369ea5e4ee10ac0516c3f641b33871 The package qdrant-js was found to contain malicious code. Source: ghsa-malware 789e158c461e8c11f86da5b04f09dab1797536199084bf548efc2f3ee13b33f1 Any...
EUVD-2026-3719
Malicious code in qdrant-js npm...
Malicious Package
Overview qdrant-js is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
MAL-2026-426 Malicious code in qdrant-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad84f3d1657583a0a6fa9d58b06258298369ea5e4ee10ac0516c3f641b33871 The package qdrant-js was found to contain malicious code. Source: ghsa-malware 789e158c461e8c11f86da5b04f09dab1797536199084bf548efc2f3ee13b33f1 Any...
EUVD-2024-2207
Malicious code in bioql PyPI...
EUVD-2024-31684
Malicious code in bioql PyPI...
EUVD-2023-42734
Malicious code in bioql PyPI...
Malicious code in qdrant-node-js-basic-example (npm)
The package qdrant-node-js-basic-example was found to contain malicious code...
MAL-2025-30999 Malicious code in qdrant-node-js-basic-example (npm)
The package qdrant-node-js-basic-example was found to contain malicious code...
CVE-2024-3078
A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical. This issue affects some unknown processing of the file lib/collection/src/collection/snapshots.rs of the component Full Snapshot REST API. The manipulation leads to path traversal. Upgrading to version 1.8.3 i...
CVE-2023-38975
Buffer Overflow vulnerability in qdrant v.1.3.2 allows a remote attacker cause a denial of service via the chucnkedvectors.rs component...
CVE-2024-3829
qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...
CVE-2024-3584
qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the /collections/name/snapshots/upload endpoint. By manipulating the name parameter through URL encoding, an attacker can upload a file to an arbitrary location on the system, such as /root/poc.txt...
CVE-2024-2221
qdrant/qdrant is vulnerable to a path traversal and arbitrary file upload vulnerability via the /collections/COLLECTION/snapshots/upload endpoint, specifically through the snapshot parameter. This vulnerability allows attackers to upload and overwrite any file on the filesystem, leading to...
GHSA-GW5W-5J7F-JMJJ vulnerabilities
Vulnerabilities for packages: qdrant...
GHSA-QG5G-GV98-5FFH vulnerabilities
Vulnerabilities for packages: parseable, qdrant, wasmcloud, ntpd-rs, zed, fnm, pixi, wasm-pack, tealdeer, wadm, wash, uv, xh, cargo-audit...
GHSA-VR26-JCQ5-FJJ8 vulnerabilities
Vulnerabilities for packages: qdrant, wasmcloud, pixi, wash, uv...