Browse all 3 CVE security advisories affecting Weaviate. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-65318 | Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader — VerbaCWE-918 | 8.6 | High | 2026-07-21 |
| CVE-2026-65317 | Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass — VerbaCWE-918 | 8.6 | High | 2026-07-21 |
| CVE-2026-59093 | Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment — weaviateCWE-266 | 8.8 | High | 2026-07-02 |
This page lists every published CVE security advisory associated with Weaviate. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.