All products

github.com/milvus-io/milvus

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System CompromiseCVE-2026-26190 · GHSA-7PPG-37FH-VCR6Version ranges need review. github.com/milvus-io/milvus Go Critical Fix reported
milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgeryCVE-2026-10814 · GHSA-JH6H-V6MP-H22VVersion ranges need review. github.com/milvus-io/milvus Go Low Fix reported
Milvus Proxy has a Critical Authentication Bypass VulnerabilityCVE-2025-64513 · GHSA-MHJQ-8C7M-3F7PVersion ranges need review. github.com/milvus-io/milvus Go Critical Fix reported