Skip to content
OpenAdvisories
High · 7.5 CVE-2023-38976 EUVD-2023-2241GHSA-8697-479h-5mfpGO-2023-2017

Weaviate denial of service vulnerability

Published Aug 21, 2023 · Updated Oct 7, 2024 · Assigned by mitre

Package: github.com/weaviate/weaviate Ecosystem: Go

Description

An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/weaviate/weaviate >= 1.20.0, < 1.20.6 1.20.6 GHSA-8697-479h-5mfp
Go github.com/weaviate/weaviate >= 1.19.0, < 1.19.13 1.19.13 GHSA-8697-479h-5mfp
Go github.com/weaviate/weaviate < 1.18.6 1.18.6 GHSA-8697-479h-5mfp
Go github.com/weaviate/weaviate < 1.18.6 · >= 1.19.0, < 1.19.13 · >= 1.20.0, < 1.20.6 1.18.6, 1.19.13, 1.20.6 GO-2023-2017

References