Skip to content
OpenAdvisories

Package · Go

github.com/pgEdge/pgedge-rag-server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-125327

    pgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requests

    pgEdge RAG Server is an API server for retrieval-augmented generation over PostgreSQL content using pgvector. Prior to 2.0.0, the unauthenticated query endpoint uses FetchDocuments in internal/database/search.go to read the entire filtered corpus without a LI…

    pgEdge pgedge-rag-server github.com/pgEdge/pgedge-rag-server Go