Go/github.com/weaviate/weaviate CVE-2023-38976: unknown, EPSS 2.14%
Denial of service vulnerability in github.com/weaviate/weaviate
Action: Upgrade github.com/weaviate/weaviate to 1.18.6 or later.
go get github.com/weaviate/weaviate@v1.18.6go get github.com/weaviate/weaviate@v1.19.13go get github.com/weaviate/weaviate@v1.20.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.18.6 | - |
| 1.19.0 | 1.19.13 | - |
| 1.20.0 | 1.20.6 | - |
Fixed versions
| 1.18.6 | 1.19.13 | 1.20.6 |
Sources
- osv: GO-2023-2017
- https://github.com/weaviate/weaviate/security/advisories/GHSA-8697-479h-5mfp
- https://github.com/weaviate/weaviate/issues/3258
- https://github.com/weaviate/weaviate/pull/3431
- https://github.com/weaviate/weaviate/commit/2a7b208d9aca07e28969e3be82689c184ccf9118
- https://github.com/weaviate/weaviate/releases/tag/v1.18.6
- https://github.com/weaviate/weaviate/releases/tag/v1.19.13
- https://github.com/weaviate/weaviate/releases/tag/v1.20.6
CVE-2023-38976 · published · modified · JSON