Vulnerabilities in Weaviate

3 results

CVE-2026-65317CRITICALVerba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware BypassEPSS 0.5%CVE-2026-65318CRITICALVerba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReaderEPSS 0.4%CVE-2026-59093HIGHWeaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role AssignmentEPSS 0.4%