Cloudanix VulnDB

GO-2025-4238

None

CVSS

—

EPSS

—

Published

Dec 15, 2025

CISA due date

—

The record

Weaviate OSS has path traversal vulnerability via the Shard Movement API in github.com/weaviate/weaviate

Affected packages

Ecosystem Package Introduced Fixed
Go github.com/weaviate/weaviate 1.30.0 1.30.20
Go github.com/weaviate/weaviate 1.31.0-rc.0 1.31.19
Go github.com/weaviate/weaviate 1.32.0-rc.0 1.32.16
Go github.com/weaviate/weaviate 1.33.0-rc.0 1.33.4
go github.com/weaviate/weaviate 1.30.0 1.30.20
go github.com/weaviate/weaviate 1.31.0-rc.0 1.31.19
go github.com/weaviate/weaviate 1.32.0-rc.0 1.32.16
go github.com/weaviate/weaviate 1.33.0-rc.0 1.33.4

Related vulnerabilities