Go/github.com/weaviate/weaviate CVE-2023-38976: high 7.5, EPSS 2.14%

Weaviate denial of service vulnerability

Action: Upgrade github.com/weaviate/weaviate to 1.18.6 or later.

go get github.com/weaviate/weaviate@v1.20.6

go get github.com/weaviate/weaviate@v1.19.13

go get github.com/weaviate/weaviate@v1.18.6

Affected

Fixed versions

Sources

• osv: GHSA-8697-479h-5mfp
• https://github.com/weaviate/weaviate/security/advisories/GHSA-8697-479h-5mfp
• https://nvd.nist.gov/vuln/detail/CVE-2023-38976
• https://github.com/weaviate/weaviate/issues/3258
• https://github.com/weaviate/weaviate/pull/3431
• https://github.com/weaviate/weaviate/commit/2a7b208d9aca07e28969e3be82689c184ccf9118
• https://github.com/weaviate/weaviate
• https://github.com/weaviate/weaviate/releases/tag/v1.18.6
• https://github.com/weaviate/weaviate/releases/tag/v1.19.13
• https://github.com/weaviate/weaviate/releases/tag/v1.20.6

CVE-2023-38976 · published 2023-08-22T18:03:13Z · modified 2026-09-10T03:49:57.547456309Z · JSON