tocsin

Go/github.com/weaviate/weaviate CVE-2025-67818: high 7.2, EPSS 0.91%

Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip in github.com/weaviate/weaviate

Action: Upgrade github.com/weaviate/weaviate to 1.30.20 or later.

go get github.com/weaviate/weaviate@v1.30.20
go get github.com/weaviate/weaviate@v1.31.19
go get github.com/weaviate/weaviate@v1.32.16
go get github.com/weaviate/weaviate@v1.33.4

Affected

introducedfixedlast affected
01.30.20-
1.31.0-rc.01.31.19-
1.32.0-rc.01.32.16-
1.33.0-rc.01.33.4-

Fixed versions

1.30.201.31.191.32.161.33.4

Sources

CVE-2025-67818 · published · modified · JSON