EUVD-2026-53000

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...

CVE-2026-18852: Improper Check for Unusual or Exceptional Conditions

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...

CVE-2026-18852

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...

CVE-2026-18852 epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...

CVE-2026-18852

The CVE concerns epsilla-cloud vectordb up to version 0.3.18 with a flaw in the Filter Parser’s engine/query/expr/expr.cpp, specifically in SplitTokens/ShuntingYard. The issue is described as an improper check for unusual conditions, allowing a local attacker to exploit the vulnerability. The exp...

CVE-2026-18852 epsilla-cloud vectordb Filter expr.cpp ShuntingYard unusual condition

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...

CVE-2026-18852

A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Filter Parser. Such manipulation leads to improper check for unusual condition...

PT-2026-67892

Name of the Vulnerable Software and Affected Versions epsilla-cloud vectordb versions prior to 0.3.18 Description An issue exists in the Filter Parser component within the file engine/query/expr/expr.cpp. Specifically, the SplitTokens and ShuntingYard functions fail to properly check for unusual...

Malicious code in vectordb-engine (PyPI)

Source: amazon-inspector 42695503b90ec4adc30c038c3321d637f05038f841bcc5f463a16b891fe4e3e0 During pip install, a custom buildext step in src/vectordbenginebuild.py runs an obfuscated payload that performs targeted reconnaissance and exfiltration. Before doing anything else, it SHA-256-hashes the...

io.kaoto.forage:camel-jbang-plugin-forage (>=1.0, <=1.2), io.kaoto.forage:forage-catalog (>=1.0, <=1.2) +2 more potentially affected by CVE-2026-55405 via dev.langchain4j:langchain4j-mariadb (>=1.10.0-beta18, <=1.11.0-beta19)

dev.langchain4j:langchain4j-mariadb MAVEN version =1.10.0-beta18, =1.0, =1.0, =1.0, =1.0, =1.2 Source cves: CVE-2026-55405 Source advisory: MEND:CVE-2026-55405...

io.kaoto.forage:forage-vectordb-mariadb (>=1.5.0, <=1.6.1) potentially affected by CVE-2026-55405 via dev.langchain4j:langchain4j-mariadb (1.13.0-beta23)

dev.langchain4j:langchain4j-mariadb MAVEN version 1.13.0-beta23 is affected by a known vulnerability. The following packages have a transitive dependency on dev.langchain4j:langchain4j-mariadb and may be impacted: - io.kaoto.forage:forage-vectordb-mariadb =1.5.0, =1.6.1 Source cves: CVE-2026-5540...

CVE-2026-13507 volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

CVE-2026-13507 volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

CVE-2026-13507

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

CVE-2026-13507 volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

CVE-2026-13507

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

CVE-2026-13507: Insufficient Verification of Data Authenticity

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

PT-2026-53163

Name of the Vulnerable Software and Affected Versions volcengine OpenViking versions prior to 0.3.22 Description Insufficient verification of data authenticity exists within the Local VectorDB Primary-key Label Handler component. The issue occurs in the str to uint64 function located in the...

claraterm (>=0.1.0, <=0.3.6), eurelis-kb-framework (>=0.0.5, <=0.0.7) +2 more potentially affected by CVE-2026-55443 via langchain (0.0.348)

langchain PYPI version 0.0.348 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - claraterm =0.1.0, =0.0.5, =0.0.2b2, =0.2.2, =0.2.7 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...

io.kaoto.forage:forage-vectordb-mariadb (>=1.5.0, <=1.6.1) potentially affected by CVE-2026-55405 via dev.langchain4j:langchain4j-mariadb (1.13.0-beta23)

dev.langchain4j:langchain4j-mariadb MAVEN version 1.13.0-beta23 is affected by a known vulnerability. The following packages have a transitive dependency on dev.langchain4j:langchain4j-mariadb and may be impacted: - io.kaoto.forage:forage-vectordb-mariadb =1.5.0, =1.6.1 Source cves: CVE-2026-5540...