https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T11:11:51.750680+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-193625 EUVD-2026-193625 2026-10-07T11:11:51.753612+00:00 EUVD-2026-193625 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38976 fkie_cve-2023-38976 2026-10-07T11:11:51.753664+00:00

An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.

 https://cve.radiocsirt.org/vuln/ghsa-8697-479h-5mfp GHSA-8697-479h-5mfp — Weaviate denial of service vulnerability 2026-10-07T11:11:51.753708+00:00

Affected: Go: github.com/weaviate/weaviate

### Impact This vulnerability is a type conversion issue that affects users of Weaviate Server versions 1.20.0 and earlier. Who is impacted: Users of Weaviate Server versions 1.20.0 and earlier are impacted by this vulnerability.

### Patches A patch has been developed for this vulnerability. Patch releases 1.20.6, 1.19.13, and 1.18.6 are fixing this vulnerability in each respective minor version release. Users are strongly recommended to upgrade to one of these patched versions to address the vulnerability. Keeping software up-to-date is crucial to avoid security vulnerabilities.

### Workarounds There are no known workarounds to fix or remediate this vulnerability without upgrading. Users must upgrade to a patched version to mitigate the risk.

### References * https://github.com/weaviate/weaviate/releases/tag/v1.18.6 * https://github.com/weaviate/weaviate/releases/tag/v1.19.13 * https://github.com/weaviate/weaviate/releases/tag/v1.20.6

 https://cve.radiocsirt.org/vuln/gsd-2023-38976 gsd-2023-38976 2026-10-07T11:11:51.753813+00:00 gsd-2023-38976