Skip to content
OpenAdvisories

Package · Go

github.com/weaviate/weaviate

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2025-67818

    Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip

    An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backu…

    github.com/weaviate/weaviate Go
  • High 7.5
    CVE-2023-38976

    Weaviate denial of service vulnerability

    An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.

    github.com/weaviate/weaviate Go