152 matches found
ai-kubernetes-helm-chart-security
Kubernetes 上的 AI：Helm chart 安全默认值（证据） 本仓库包含 Sorami 技术报告 《Kubernetes 上的 AI：14 个 Helm chart 中有 10 个在交付时不带 API 认证》 （版本 1.2）背后的数据与证据。 在此阅读报告： https://sorami.com.au/research/ai-kubernetes-helm-chart-security/ 方法、发现、严重性评级和加固建议均在报告中。本仓库不再重复这些内容。它保存报告所引用的数据文件，以便读者核对每一项论断。 测试的 Chart 默认值，渲染于 2026 年 9 月 24...
CLEANSTART-2026-LJ43739 HashiCorp memberlist before version 0
Multiple security vulnerabilities affect the weaviate-fips package. HashiCorp memberlist before version 0. See references for individual vulnerability details...
CLEANSTART-2026-QN49433 HashiCorp memberlist before version 0
Multiple security vulnerabilities affect the weaviate-fips package. HashiCorp memberlist before version 0. See references for individual vulnerability details...
SUSE CVE-2026-11500
A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the component Static API Key Handler. The manipulation of the argument StaticApiKey leads to authorization bypass. It is...
CLEANSTART-2026-DO87068 Security fixes in weaviate-fips 1.38.10-r2
Package weaviate-fips version 1.38.10-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-PY20698 Security fixes in weaviate-fips 1.38.10-r1
Package weaviate-fips version 1.38.10-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-KP84275 Security fixes in weaviate-fips 1.38.11-r2
Package weaviate-fips version 1.38.11-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
CLEANSTART-2026-LL73757 Security fixes in weaviate-fips 1.38.11-r1
Package weaviate-fips version 1.38.11-r1 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...
GO-2026-6140 Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate...
PT-2026-80384
Weaviate has an Improper Authorization issue in github.com/weaviate/weaviate...
GO-2025-3987 vulnerabilities
Vulnerabilities for packages: weaviate, hydra-fips, hydra...
GO-2025-3987 vulnerabilities
Vulnerabilities for packages: weaviate, hydra...
GO-2026-4514 vulnerabilities
Vulnerabilities for packages: vcluster, loki, tempo, dgraph, kubevela, terragrunt, minio, datadog-agent, gitlab-runner, teleport, terraform-mcp-server, k8sgpt, opentelemetry-collector, witness, weaviate, cri-tools, prometheus, nuclei, maru, dagger, malcontent, nfpm, ollama, grafana, mcp-grafana,...
CLEANSTART-2026-IW23752 Security fixes in weaviate-fips 1.38.6-r1
Package weaviate-fips version 1.38.6-r1 fixes 3 vulnerabilities: CVE-2026-56852, CVE-2026-46600, ghsa-259r-337f-4rfw...
CLEANSTART-2026-PA01765 Security fixes in weaviate-fips 1.37.13-r1
Package weaviate-fips version 1.37.13-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-QC88061 Security fixes in weaviate-fips 1.38.6-r2
Package weaviate-fips version 1.38.6-r2 fixes 1 vulnerabilities: CVE-2026-14362...
CLEANSTART-2026-ME41093 Security fixes in weaviate-fips 1.38.5-r1
Package weaviate-fips version 1.38.5-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-BF31650 Security fixes in weaviate-fips 1.37.12-r1
Package weaviate-fips version 1.37.12-r1 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-IE70355 Security fixes in weaviate-fips 1.36.17-r0
Package weaviate-fips version 1.36.17-r0 fixes 20 vulnerabilities: CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502...