GO-2025-4237
NoneCVSS
—
EPSS
—
Published
Dec 15, 2025
CISA due date
—
The record
Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip in github.com/weaviate/weaviate
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/weaviate/weaviate | 0 | 1.30.20 |
| Go | github.com/weaviate/weaviate | 1.31.0-rc.0 | 1.31.19 |
| Go | github.com/weaviate/weaviate | 1.32.0-rc.0 | 1.32.16 |
| Go | github.com/weaviate/weaviate | 1.33.0-rc.0 | 1.33.4 |
| go | github.com/weaviate/weaviate | 1.31.0-rc.0 | 1.31.19 |
| go | github.com/weaviate/weaviate | 1.32.0-rc.0 | 1.32.16 |
| go | github.com/weaviate/weaviate | 1.33.0-rc.0 | 1.33.4 |
Related vulnerabilities
- CVE-2025-67818 Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip Same vulnerability
- GO-2025-4238 Weaviate OSS has path traversal vulnerability via the Shard Movement API in… Also affects github.com/weaviate/weaviate
- CVE-2025-67819 Weaviate OSS has path traversal vulnerability via the Shard Movement API Also affects github.com/weaviate/weaviate