{"action":"Upgrade qdrant to 1.9.0 or later.","affected":[{"fixed":"1.9.0","introduced":"1.9.0-dev"}],"component":"qdrant","cve_ids":["CVE-2024-3584"],"ecosystem":"crates.io","epss":0.00548,"exploited":false,"fixed_versions":["1.9.0"],"ghsa_id":"GHSA-xcr2-h8hv-6227","id":"tcs_01M5KF4PVTR6WG6FSEZSAKBTH8","modified_at":"2025-07-10T19:19:45Z","published_at":"2024-06-02T22:30:10Z","references":["https://osv.dev/vulnerability/GHSA-xcr2-h8hv-6227","https://nvd.nist.gov/vuln/detail/CVE-2024-3584","https://github.com/qdrant/qdrant/commit/15479a45ffa3b955485ae516696f7e933a8cce8a","https://github.com/qdrant/qdrant","https://huntr.com/bounties/5c7c82e2-4873-40b7-a5f3-0f4a42642f73"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xcr2-h8hv-6227","url":"https://osv.dev/vulnerability/GHSA-xcr2-h8hv-6227"}],"summary":"qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint"}