weaviate vulnerabilities
CVEs whose affected-version data names the weaviate package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-67819Medium· 4.9An issue was discovered in Weaviate OSS before 1.33.4
An issue was discovered in Weaviate OSS before 1.33.4. Due to a lack of validation of the fileName field in the transfer logic, an attacker who can call the GetFile method while a shard is in the "Pause file activity" state and the FileR…
▾ Sunlitweaviate · weaviateEPSS 0.50%via NVD
CVE-2025-67818High· 7.2An issue was discovered in Weaviate OSS before 1.33.4
An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the res…
▾ Twilightweaviate · weaviateEPSS 0.91%via NVD