178 matches found
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: src, aactl, kubescape, kubeflow, dgraph, buildkitd, cortex, k3d, kubevela, scorecard, slsa-verifier, spark-operator, up, terraform-provider-sendgrid...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: hugo, oauth2-proxy, pulumi-language-yaml, kaf, newrelic-infrastructure-agent, dex, flux-helm-controller, dgraph, dynamic-localpv-provisioner, atlantis, conftest, envoy-ratelimit, memcached-exporter, gobuster, certificate-transparency, gitness, pulumi-language-dotnet,...
GHSA-8697-479H-5MFP Weaviate denial of service vulnerability
Impact This vulnerability is a type conversion issue that affects users of Weaviate Server versions 1.20.0 and earlier. Who is impacted: Users of Weaviate Server versions 1.20.0 and earlier are impacted by this vulnerability. Patches A patch has been developed for this vulnerability. Patch releas...
Weaviate denial of service vulnerability
Impact This vulnerability is a type conversion issue that affects users of Weaviate Server versions 1.20.0 and earlier. Who is impacted: Users of Weaviate Server versions 1.20.0 and earlier are impacted by this vulnerability. Patches A patch has been developed for this vulnerability. Patch releas...
Denial Of Service (DoS)
github.com/weaviate/weaviate is vulnerable to Denial Of Service DoS. The vulnerability exists because the handleUnbatchedGraphQLRequest function of handlersgraphql.go does not properly check the query type for the metrics request, allowing an attacker to crash the application...
Duplicate Advisory: weaviate denial of service vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8697-479h-5mfp. This link is maintained to preserve external references. Original Description An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the...
GHSA-CH6W-MC6C-G65G Duplicate Advisory: weaviate denial of service vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8697-479h-5mfp. This link is maintained to preserve external references. Original Description An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the...
CVE-2023-38976
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...
CVE-2023-38976
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...
Denial of service
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...
CVE-2023-38976
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...
CVE-2023-38976
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...
CVE-2023-38976: Reachable Assertion
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...
CVE-2023-38976
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function...
CVE-2023-38976
CVE-2023-38976 affects Weaviate Server v1.20.0 (and earlier) and is caused by a flaw in handleUnbatchedGraphQLRequest that allows remote denial-of-service. The Red Hat/OSV/GHSA entries corroborate a DoS resulting from a type/query handling issue in GraphQL metrics handling, with the vulnerability...
Weaviate security vulnerabilities
Weaviate is an open source vector database from Weaviate Open Source. A security vulnerability exists in Weaviate version v.1.20.0, which stems from a vulnerability that allows attackers to cause a denial of service DoS via the handleUnbatchedGraphQLRequest function...
PT-2023-26715 · Weaviate · Weaviate
Name of the Vulnerable Software and Affected Versions: Weaviate versions 1.20.0 and earlier Description: The issue is a type conversion problem that allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. This affects users of Weaviate Server versions...
