EUVD-2024-0105

Malicious code in bioql PyPI...

EUVD-2023-2241

Malicious code in bioql PyPI...

GHSA-FMJH-F678-CV3X vulnerabilities

Vulnerabilities for packages: weaviate, hydra...

CVE-2025-10954 vulnerabilities

Vulnerabilities for packages: weaviate, hydra...

CVE-2025-10954 vulnerabilities

Vulnerabilities for packages: hydra-fips, weaviate, hydra...

GHSA-FMJH-F678-CV3X vulnerabilities

Vulnerabilities for packages: hydra-fips, weaviate, hydra...

CVE-2023-38976

An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...

CVE-2025-27144 vulnerabilities

Vulnerabilities for packages: openbao, dgraph, flux-kustomize-controller, kiali, terragrunt, undock, dagger, policy-controller, apko, fulcio, traefik, sigstore-scaffolding, istio, gatus, bank-vaults, containerd, ko, aactl, grpc-health-probe, skopeo, tflint, spire-controller-manager,...

GHSA-C6GW-W398-HV78 vulnerabilities

Vulnerabilities for packages: openbao, dgraph, flux-kustomize-controller, kiali, terragrunt, undock, dagger, policy-controller, apko, fulcio, traefik, sigstore-scaffolding, istio, gatus, bank-vaults, containerd, ko, aactl, grpc-health-probe, skopeo, tflint, spire-controller-manager,...

GHSA-WCJW-3V6P-4V3R MindsDB Eval Injection vulnerability

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

MindsDB Eval Injection vulnerability

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

CVE-2024-45846

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

PYSEC-2024-77

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

PYSEC-2024-77

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

CVE-2024-45846

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

CVE-2024-45846

The CVE-2024-45846 entry describes an arbitrary code execution vulnerability in MindsDB versions 23.10.3.0 through 24.7.4.1 when the Weaviate integration is installed. A specially crafted SELECT WHERE clause containing Python code can be passed to an eval function and executed on the server, impa...

CVE-2024-45846

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

CVE-2024-45846

An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...

PT-2024-6371 · Mindsdb +1 · Mindsdb +1

Name of the Vulnerable Software and Affected Versions: MindsDB versions 23.10.3.0 through 24.7.4.1 Description: An arbitrary code execution issue exists when the Weaviate integration is installed on the server. If a specially crafted SELECT WHERE clause containing Python code is run against a...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: temporal-ui-server, k3s, wolfictl, timestamp-authority, nerdctl, kargo, gomplate, dgraph, flux-kustomize-controller, gitsign, temporal, flux-source-controller, kube-rbac-proxy, minio, terragrunt, step, rook, tekton-chains, kubernetes-dashboard, zot, frp, tkn,...