Advisories · Technology
Weaviate Verba.
Every CVE that names Weaviate Verba among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure
- Weaviate Verba
- Information disclosure
- Broken access control
- CVSS 9.2 CriticalCritical · CVSS 9+
Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader
- Weaviate Verba
- Server-side request forgery (SSRF)
- CVSS 9.2 CriticalCritical · CVSS 9+
Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass
- Weaviate Verba
- Server-side request forgery (SSRF)