github.com/milvus-io/milvus vulnerabilities
CVEs whose affected-version data names the github.com/milvus-io/milvus package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-10814Medium· 4.5milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery
milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery
▾ Sunlitmilvus-io · github.com/milvus-io/milvusEPSS 0.09%via OSV
CVE-2026-26190Critical· 9.8PoCMilvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
▾ Abyssalmilvus-io · github.com/milvus-io/milvusEPSS 37%via OSV