跳到正文
Weaviate·· 2026-10-15AI 评分31

Weaviate v1.39.3 修复 nearObject 跨集合向量泄露漏洞(CVE 待分配)

Weaviate security release - Medium severity fix for a cross-collection vector disclosure in nearObject (CVE pending assignment)

AI 导读

Weaviate 发布 v1.39.3 及更高版本,修复 GraphQL nearObject 搜索算子的中危授权漏洞:用户可借指向无权限集合的 beacon 读取该对象向量。

来源:Weaviate · weaviate.io