Weaviate·· 2026-10-15AI 评分31
Weaviate v1.39.3 修复 nearObject 跨集合向量泄露漏洞(CVE 待分配)
Weaviate security release - Medium severity fix for a cross-collection vector disclosure in nearObject (CVE pending assignment)
AI 导读
Weaviate 发布 v1.39.3 及更高版本,修复 GraphQL nearObject 搜索算子的中危授权漏洞:用户可借指向无权限集合的 beacon 读取该对象向量。
来源:Weaviate · weaviate.io