[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-11500":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":648,"aliases":658,"duplicate_of":9,"upstream":661,"downstream":662,"duplicates":665,"related":666,"reserved_at":9,"published_at":668,"modified_at":669,"state":670,"summary":671,"references_raw":679,"kevs":740,"epss":741,"epss_history":744,"metrics":1019,"affected":1047},"CVE-2026-11500","A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the component Static API Key Handler. The manipulation of the argument StaticApiKey leads to authorization bypass. It is possible to initiate the attack remotely. The complexity of an attack is rather high. It is stated that the exploitability is difficult. The exploit is publicly available and might be used. Upgrading to version 1.38.0-rc.0 is able to resolve this issue. The identifier of the patch is 40f2cc32279f0f8a51016c3c6870a2c0c808e6c0. You should upgrade the affected component.",null,[11,641],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","weakness","Draft","Class","High",[20,68,72,131,276,318,322,326,330,334,338,342,509,599,629,633,637],{"id":21,"name":22,"techniques":23},"CAPEC-1","Accessing Functionality Not Properly Constrained by ACLs",[24],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.010","Services File Permissions Weakness",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,54,59,63],{"id":45,"name":46,"tactic":47},"D3-RS","Restore Software",{"name":48},"Restore",{"id":50,"name":51,"tactic":52},"D3-SWI","Software Inventory",{"name":53},"Model",{"id":55,"name":56,"tactic":57},"D3-SBV","Service Binary Verification",{"name":58},"Detect",{"id":60,"name":61,"tactic":62},"D3-AVE","Asset Vulnerability Enumeration",{"name":53},{"id":64,"name":65,"tactic":66},"D3-SU","Software Update",{"name":67},"Harden",{"id":69,"name":70,"techniques":71},"CAPEC-104","Cross Zone Scripting",[],{"id":73,"name":74,"techniques":75},"CAPEC-127","Directory Indexing",[76],{"id":77,"name":78,"tactics":79,"countermeasures":83},"T1083","File and Directory Discovery",[80],{"id":81,"name":82},"TA0102","Discovery",[84,89,93,98,102,106,110,114,118,122,126],{"id":85,"name":86,"tactic":87},"D3-CQ","Content Quarantine",{"name":88},"Isolate",{"id":90,"name":91,"tactic":92},"D3-FE","File Encryption",{"name":67},{"id":94,"name":95,"tactic":96},"D3-DF","Decoy File",{"name":97},"Deceive",{"id":99,"name":100,"tactic":101},"D3-FA","File Analysis",{"name":58},{"id":103,"name":104,"tactic":105},"D3-FIM","File Integrity Monitoring",{"name":58},{"id":107,"name":108,"tactic":109},"D3-LFP","Local File Permissions",{"name":88},{"id":111,"name":112,"tactic":113},"D3-CF","Content Filtering",{"name":88},{"id":115,"name":116,"tactic":117},"D3-RFAM","Remote File Access Mediation",{"name":88},{"id":119,"name":120,"tactic":121},"D3-RF","Restore File",{"name":48},{"id":123,"name":124,"tactic":125},"D3-CM","Content Modification",{"name":88},{"id":127,"name":128,"tactic":129},"D3-FEV","File Eviction",{"name":130},"Evict",{"id":132,"name":133,"techniques":134},"CAPEC-13","Subverting Environment Variable Values",[135,200,236],{"id":136,"name":137,"tactics":138,"countermeasures":141},"T1562.003","Impair Command History Logging",[139,140],{"id":35,"name":36},{"id":38,"name":39},[142,144,146,150,152,154,158,162,166,168,170,174,178,180,182,184,188,190,192,196],{"id":119,"name":120,"tactic":143},{"name":48},{"id":85,"name":86,"tactic":145},{"name":88},{"id":147,"name":148,"tactic":149},"D3-CI","Configuration Inventory",{"name":53},{"id":94,"name":95,"tactic":151},{"name":97},{"id":99,"name":100,"tactic":153},{"name":58},{"id":155,"name":156,"tactic":157},"D3-DRA","Disable Remote Access",{"name":67},{"id":159,"name":160,"tactic":161},"D3-ACH","Application Configuration Hardening",{"name":67},{"id":163,"name":164,"tactic":165},"D3-RC","Restore Configuration",{"name":48},{"id":90,"name":91,"tactic":167},{"name":67},{"id":103,"name":104,"tactic":169},{"name":58},{"id":171,"name":172,"tactic":173},"D3-RKD","Registry Key Deletion",{"name":130},{"id":175,"name":176,"tactic":177},"D3-DA","Dynamic Analysis",{"name":58},{"id":111,"name":112,"tactic":179},{"name":88},{"id":107,"name":108,"tactic":181},{"name":88},{"id":127,"name":128,"tactic":183},{"name":130},{"id":185,"name":186,"tactic":187},"D3-EFA","Emulated File Analysis",{"name":58},{"id":115,"name":116,"tactic":189},{"name":88},{"id":123,"name":124,"tactic":191},{"name":88},{"id":193,"name":194,"tactic":195},"D3-EAL","Executable Allowlisting",{"name":88},{"id":197,"name":198,"tactic":199},"D3-EDL","Executable Denylisting",{"name":88},{"id":201,"name":202,"tactics":203,"countermeasures":209},"T1574.006","Dynamic Linker Hijacking",[204,205,206,207,208],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[210,212,214,216,220,222,224,226,228,230,232,234],{"id":123,"name":124,"tactic":211},{"name":88},{"id":127,"name":128,"tactic":213},{"name":130},{"id":99,"name":100,"tactic":215},{"name":58},{"id":217,"name":218,"tactic":219},"D3-SFA","System File Analysis",{"name":58},{"id":119,"name":120,"tactic":221},{"name":48},{"id":111,"name":112,"tactic":223},{"name":88},{"id":107,"name":108,"tactic":225},{"name":88},{"id":90,"name":91,"tactic":227},{"name":67},{"id":115,"name":116,"tactic":229},{"name":88},{"id":85,"name":86,"tactic":231},{"name":88},{"id":94,"name":95,"tactic":233},{"name":97},{"id":103,"name":104,"tactic":235},{"name":58},{"id":237,"name":238,"tactics":239,"countermeasures":245},"T1574.007","Path Interception by PATH Environment Variable",[240,241,242,243,244],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[246,248,250,252,254,256,258,260,262,264,266,268,270,272,274],{"id":123,"name":124,"tactic":247},{"name":88},{"id":99,"name":100,"tactic":249},{"name":58},{"id":94,"name":95,"tactic":251},{"name":97},{"id":111,"name":112,"tactic":253},{"name":88},{"id":127,"name":128,"tactic":255},{"name":130},{"id":103,"name":104,"tactic":257},{"name":58},{"id":107,"name":108,"tactic":259},{"name":88},{"id":90,"name":91,"tactic":261},{"name":67},{"id":193,"name":194,"tactic":263},{"name":88},{"id":175,"name":176,"tactic":265},{"name":58},{"id":115,"name":116,"tactic":267},{"name":88},{"id":197,"name":198,"tactic":269},{"name":88},{"id":185,"name":186,"tactic":271},{"name":58},{"id":85,"name":86,"tactic":273},{"name":88},{"id":119,"name":120,"tactic":275},{"name":48},{"id":277,"name":278,"techniques":279},"CAPEC-17","Using Malicious Files",[280,300],{"id":281,"name":282,"tactics":283,"countermeasures":289},"T1574.005","Executable Installer File Permissions Weakness",[284,285,286,287,288],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[290,292,294,296,298],{"id":64,"name":65,"tactic":291},{"name":67},{"id":45,"name":46,"tactic":293},{"name":48},{"id":60,"name":61,"tactic":295},{"name":53},{"id":50,"name":51,"tactic":297},{"name":53},{"id":55,"name":56,"tactic":299},{"name":58},{"id":25,"name":26,"tactics":301,"countermeasures":307},[302,303,304,305,306],{"id":29,"name":30},{"id":32,"name":33},{"id":35,"name":36},{"id":38,"name":39},{"id":41,"name":42},[308,310,312,314,316],{"id":45,"name":46,"tactic":309},{"name":48},{"id":50,"name":51,"tactic":311},{"name":53},{"id":55,"name":56,"tactic":313},{"name":58},{"id":60,"name":61,"tactic":315},{"name":53},{"id":64,"name":65,"tactic":317},{"name":67},{"id":319,"name":320,"techniques":321},"CAPEC-39","Manipulating Opaque Client-based Data Tokens",[],{"id":323,"name":324,"techniques":325},"CAPEC-402","Bypassing ATA Password Security",[],{"id":327,"name":328,"techniques":329},"CAPEC-45","Buffer Overflow via Symbolic Links",[],{"id":331,"name":332,"techniques":333},"CAPEC-5","Blue Boxing",[],{"id":335,"name":336,"techniques":337},"CAPEC-51","Poison Web Service Registry",[],{"id":339,"name":340,"techniques":341},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":343,"name":344,"techniques":345},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[346,398],{"id":347,"name":348,"tactics":349,"countermeasures":353},"T1134.001","Token Impersonation/Theft",[350,351,352],{"id":35,"name":36},{"id":38,"name":39},{"id":32,"name":33},[354,358,362,366,370,374,378,382,386,390,394],{"id":355,"name":356,"tactic":357},"D3-CR","Credential Revocation",{"name":130},{"id":359,"name":360,"tactic":361},"D3-CCSA","Credential Compromise Scope Analysis",{"name":58},{"id":363,"name":364,"tactic":365},"D3-CTS","Credential Transmission Scoping",{"name":88},{"id":367,"name":368,"tactic":369},"D3-ANCI","Authentication Cache Invalidation",{"name":130},{"id":371,"name":372,"tactic":373},"D3-TB","Token Binding",{"name":67},{"id":375,"name":376,"tactic":377},"D3-TBA","Token-based Authentication",{"name":67},{"id":379,"name":380,"tactic":381},"D3-DUC","Decoy User Credential",{"name":97},{"id":383,"name":384,"tactic":385},"D3-CH","Credential Hardening",{"name":67},{"id":387,"name":388,"tactic":389},"D3-CRO","Credential Rotation",{"name":67},{"id":391,"name":392,"tactic":393},"D3-MFA","Multi-factor Authentication",{"name":67},{"id":395,"name":396,"tactic":397},"D3-RIC","Reissue Credential",{"name":48},{"id":399,"name":400,"tactics":401,"countermeasures":406},"T1550.004","Web Session Cookie",[402,403],{"id":35,"name":36},{"id":404,"name":405},"TA0109","Lateral Movement",[407,409,413,415,417,421,425,429,433,437,441,445,449,453,457,459,463,465,469,471,475,479,481,483,487,491,495,497,501,505],{"id":387,"name":388,"tactic":408},{"name":67},{"id":410,"name":411,"tactic":412},"D3-SCF","System Call Filtering",{"name":88},{"id":395,"name":396,"tactic":414},{"name":48},{"id":363,"name":364,"tactic":416},{"name":88},{"id":418,"name":419,"tactic":420},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":58},{"id":422,"name":423,"tactic":424},"D3-APCA","Application Protocol Command Analysis",{"name":58},{"id":426,"name":427,"tactic":428},"D3-PSMD","Process Self-Modification Detection",{"name":58},{"id":430,"name":431,"tactic":432},"D3-RTSD","Remote Terminal Session Detection",{"name":58},{"id":434,"name":435,"tactic":436},"D3-PSA","Process Spawn Analysis",{"name":58},{"id":438,"name":439,"tactic":440},"D3-HBPI","Hardware-based Process Isolation",{"name":88},{"id":442,"name":443,"tactic":444},"D3-KBPI","Kernel-based Process Isolation",{"name":88},{"id":446,"name":447,"tactic":448},"D3-ABPI","Application-based Process Isolation",{"name":88},{"id":450,"name":451,"tactic":452},"D3-HS","Host Shutdown",{"name":130},{"id":454,"name":455,"tactic":456},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":58},{"id":355,"name":356,"tactic":458},{"name":130},{"id":460,"name":461,"tactic":462},"D3-HR","Host Reboot",{"name":130},{"id":359,"name":360,"tactic":464},{"name":58},{"id":466,"name":467,"tactic":468},"D3-NTF","Network Traffic Filtering",{"name":88},{"id":379,"name":380,"tactic":470},{"name":97},{"id":472,"name":473,"tactic":474},"D3-CSPP","Client-server Payload Profiling",{"name":58},{"id":476,"name":477,"tactic":478},"D3-PT","Process Termination",{"name":130},{"id":383,"name":384,"tactic":480},{"name":67},{"id":391,"name":392,"tactic":482},{"name":67},{"id":484,"name":485,"tactic":486},"D3-PLA","Process Lineage Analysis",{"name":58},{"id":488,"name":489,"tactic":490},"D3-NTCD","Network Traffic Community Deviation",{"name":58},{"id":492,"name":493,"tactic":494},"D3-PS","Process Suspension",{"name":130},{"id":367,"name":368,"tactic":496},{"name":130},{"id":498,"name":499,"tactic":500},"D3-NTSA","Network Traffic Signature Analysis",{"name":58},{"id":502,"name":503,"tactic":504},"D3-WSAM","Web Session Access Mediation",{"name":88},{"id":506,"name":507,"tactic":508},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":58},{"id":510,"name":511,"techniques":512},"CAPEC-647","Collect Data from Registries",[513,543,567],{"id":514,"name":515,"tactics":516,"countermeasures":520},"T1005","Data from Local System",[517],{"id":518,"name":519},"TA0100","Collection",[521,523,525,527,529,531,533,535,537,539,541],{"id":111,"name":112,"tactic":522},{"name":88},{"id":94,"name":95,"tactic":524},{"name":97},{"id":119,"name":120,"tactic":526},{"name":48},{"id":107,"name":108,"tactic":528},{"name":88},{"id":127,"name":128,"tactic":530},{"name":130},{"id":115,"name":116,"tactic":532},{"name":88},{"id":99,"name":100,"tactic":534},{"name":58},{"id":123,"name":124,"tactic":536},{"name":88},{"id":90,"name":91,"tactic":538},{"name":67},{"id":103,"name":104,"tactic":540},{"name":58},{"id":85,"name":86,"tactic":542},{"name":88},{"id":544,"name":545,"tactics":546,"countermeasures":548},"T1012","Query Registry",[547],{"id":81,"name":82},[549,553,555,559,563],{"id":550,"name":551,"tactic":552},"D3-SCP","System Configuration Permissions",{"name":67},{"id":410,"name":411,"tactic":554},{"name":88},{"id":556,"name":557,"tactic":558},"D3-SCA","System Call Analysis",{"name":58},{"id":560,"name":561,"tactic":562},"D3-RD","Restore Database",{"name":48},{"id":564,"name":565,"tactic":566},"D3-DI","Data Inventory",{"name":53},{"id":568,"name":569,"tactics":570,"countermeasures":574},"T1552.002","Credentials in Registry",[571],{"id":572,"name":573},"TA0031","Credential Access",[575,577,579,581,583,585,587,589,591,593,595,597],{"id":395,"name":396,"tactic":576},{"name":48},{"id":359,"name":360,"tactic":578},{"name":58},{"id":391,"name":392,"tactic":580},{"name":67},{"id":383,"name":384,"tactic":582},{"name":67},{"id":363,"name":364,"tactic":584},{"name":88},{"id":355,"name":356,"tactic":586},{"name":130},{"id":550,"name":551,"tactic":588},{"name":67},{"id":367,"name":368,"tactic":590},{"name":130},{"id":387,"name":388,"tactic":592},{"name":67},{"id":560,"name":561,"tactic":594},{"name":48},{"id":379,"name":380,"tactic":596},{"name":97},{"id":564,"name":565,"tactic":598},{"name":53},{"id":600,"name":601,"techniques":602},"CAPEC-668","Key Negotiation of Bluetooth Attack (KNOB)",[603],{"id":604,"name":605,"tactics":606,"countermeasures":610},"T1565.002","Transmitted Data Manipulation",[607],{"id":608,"name":609},"TA0105","Impact",[611,613,615,617,619,621,623,625,627],{"id":498,"name":499,"tactic":612},{"name":58},{"id":430,"name":431,"tactic":614},{"name":58},{"id":466,"name":467,"tactic":616},{"name":88},{"id":454,"name":455,"tactic":618},{"name":58},{"id":422,"name":423,"tactic":620},{"name":58},{"id":472,"name":473,"tactic":622},{"name":58},{"id":418,"name":419,"tactic":624},{"name":58},{"id":488,"name":489,"tactic":626},{"name":58},{"id":506,"name":507,"tactic":628},{"name":58},{"id":630,"name":631,"techniques":632},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":634,"name":635,"techniques":636},"CAPEC-77","Manipulating User-Controlled Variables",[],{"id":638,"name":639,"techniques":640},"CAPEC-87","Forceful Browsing",[],{"_key":642,"id":642,"name":643,"description":644,"type":15,"status":645,"abstraction":646,"likelihood_of_exploit":18,"capec":647},"CWE-639","Authorization Bypass Through User-Controlled Key","The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.","Incomplete","Base",[],[649],{"_key":650,"name":651,"source":652,"url":653,"maturity":654,"reliability_score":655,"verified":656,"type":9,"platforms":657,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_WEAVIATE_WEAVIATE","Weaviate","github","https://github.com/weaviate/weaviate/issues/3258","poc",0.3,false,[],[659,660],"GHSA-jqpm-wf57-qx5c","GO-2026-6140",[],[663],{"_key":664},"OPENSUSE-SU-2026:21761-1",[],[667],{"_key":664},"2026-06-08T09:00:12.155Z","2026-06-08T13:26:51.375Z","Deferred",{"cisa_kev":656,"cisa_ransomware":656,"cisa_vendor":9,"epss_severity":672,"epss_score":673,"severity":674,"severity_score":675,"severity_version":676,"severity_source":677,"severity_vector":678,"severity_status":670},"low",0.00338,"medium",5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",[680,689,695,700,704,711,717,721,726,731,736],{"url":681,"sources":682,"tags":685},"https://vuldb.com/vuln/369120",[677,683,684],"nvd","osv_go",[686,687,688],"VDB Entry","Technical Description","WEB",{"url":690,"sources":691,"tags":692},"https://vuldb.com/vuln/369120/cti",[677,683,684],[693,694,688],"Signature","Permissions Required",{"url":696,"sources":697,"tags":698},"https://vuldb.com/cve/CVE-2026-11500",[677,683,684],[699,688],"Third Party Advisory",{"url":701,"sources":702,"tags":703},"https://vuldb.com/submit/835080",[677,683,684],[699,688],{"url":705,"sources":706,"tags":707},"https://github.com/weaviate/weaviate/issues/11392",[677,683,684],[708,709,688,710],"Exploit","Issue Tracking","REPORT",{"url":712,"sources":713,"tags":714},"https://github.com/weaviate/weaviate/commit/40f2cc32279f0f8a51016c3c6870a2c0c808e6c0",[677,683,684],[715,688,716],"Patch","FIX",{"url":718,"sources":719,"tags":720},"https://github.com/weaviate/weaviate/releases/tag/v1.38.0-rc.0",[677,683,684],[715,688],{"url":722,"sources":723,"tags":724},"https://github.com/weaviate/weaviate/",[677,683],[725],"Product",{"url":727,"sources":728,"tags":729},"https://nvd.nist.gov/vuln/detail/CVE-2026-11500",[684],[730],"Advisory",{"url":732,"sources":733,"tags":734},"https://github.com/weaviate/weaviate",[684],[735],"PACKAGE",{"url":737,"sources":738,"tags":739},"https://github.com/advisories/GHSA-jqpm-wf57-qx5c",[684],[730],[],{"date":742,"score":673,"percentile":743},"2026-09-19",0.27308,[745,749,752,755,758,761,764,768,772,775,778,781,784,787,790,793,797,800,803,806,809,812,815,818,821,824,827,830,833,836,839,842,845,848,851,854,857,860,863,866,869,872,875,878,881,884,887,890,893,896,899,902,905,908,911,914,917,920,923,926,928,931,934,937,940,943,946,949,952,955,958,961,964,967,970,973,976,979,983,986,989,992,995,998,1001,1004,1007,1010,1013,1016],{"date":746,"score":747,"percentile":748},"2026-06-08",0.00071,0.21818,{"date":750,"score":747,"percentile":751},"2026-06-09",0.21827,{"date":753,"score":747,"percentile":754},"2026-06-10",0.21845,{"date":756,"score":747,"percentile":757},"2026-06-11",0.21863,{"date":759,"score":747,"percentile":760},"2026-06-12",0.22051,{"date":762,"score":747,"percentile":763},"2026-06-13",0.22062,{"date":765,"score":766,"percentile":767},"2026-06-14",0.00072,0.22272,{"date":769,"score":770,"percentile":771},"2026-06-15",0.00442,0.34961,{"date":773,"score":770,"percentile":774},"2026-06-16",0.35017,{"date":776,"score":770,"percentile":777},"2026-06-17",0.3505,{"date":779,"score":770,"percentile":780},"2026-06-18",0.35119,{"date":782,"score":770,"percentile":783},"2026-06-19",0.35106,{"date":785,"score":770,"percentile":786},"2026-06-20",0.35101,{"date":788,"score":770,"percentile":789},"2026-06-21",0.35086,{"date":791,"score":770,"percentile":792},"2026-06-22",0.35072,{"date":794,"score":795,"percentile":796},"2026-06-23",0.00281,0.19698,{"date":798,"score":795,"percentile":799},"2026-06-24",0.19727,{"date":801,"score":795,"percentile":802},"2026-06-25",0.19823,{"date":804,"score":795,"percentile":805},"2026-06-26",0.19856,{"date":807,"score":795,"percentile":808},"2026-06-27",0.19896,{"date":810,"score":795,"percentile":811},"2026-06-28",0.19869,{"date":813,"score":795,"percentile":814},"2026-06-29",0.19864,{"date":816,"score":795,"percentile":817},"2026-06-30",0.1985,{"date":819,"score":795,"percentile":820},"2026-07-01",0.1996,{"date":822,"score":795,"percentile":823},"2026-07-02",0.19949,{"date":825,"score":795,"percentile":826},"2026-07-03",0.19952,{"date":828,"score":795,"percentile":829},"2026-07-04",0.19964,{"date":831,"score":795,"percentile":832},"2026-07-05",0.19971,{"date":834,"score":795,"percentile":835},"2026-07-06",0.19983,{"date":837,"score":795,"percentile":838},"2026-07-07",0.19977,{"date":840,"score":795,"percentile":841},"2026-07-08",0.19975,{"date":843,"score":795,"percentile":844},"2026-07-09",0.20004,{"date":846,"score":795,"percentile":847},"2026-07-10",0.20018,{"date":849,"score":795,"percentile":850},"2026-07-11",0.20037,{"date":852,"score":795,"percentile":853},"2026-07-12",0.20031,{"date":855,"score":795,"percentile":856},"2026-07-13",0.20045,{"date":858,"score":795,"percentile":859},"2026-07-14",0.20067,{"date":861,"score":795,"percentile":862},"2026-07-15",0.20095,{"date":864,"score":795,"percentile":865},"2026-07-16",0.20124,{"date":867,"score":795,"percentile":868},"2026-07-17",0.20138,{"date":870,"score":795,"percentile":871},"2026-07-18",0.20144,{"date":873,"score":795,"percentile":874},"2026-07-19",0.20147,{"date":876,"score":795,"percentile":877},"2026-07-20",0.20235,{"date":879,"score":795,"percentile":880},"2026-07-21",0.20237,{"date":882,"score":795,"percentile":883},"2026-07-22",0.20323,{"date":885,"score":795,"percentile":886},"2026-07-23",0.20303,{"date":888,"score":795,"percentile":889},"2026-07-24",0.20307,{"date":891,"score":795,"percentile":892},"2026-07-25",0.20379,{"date":894,"score":795,"percentile":895},"2026-07-26",0.20367,{"date":897,"score":795,"percentile":898},"2026-07-27",0.20342,{"date":900,"score":795,"percentile":901},"2026-07-28",0.204,{"date":903,"score":795,"percentile":904},"2026-07-29",0.20394,{"date":906,"score":795,"percentile":907},"2026-07-30",0.20407,{"date":909,"score":795,"percentile":910},"2026-07-31",0.20421,{"date":912,"score":795,"percentile":913},"2026-08-01",0.20424,{"date":915,"score":795,"percentile":916},"2026-08-02",0.20429,{"date":918,"score":795,"percentile":919},"2026-08-03",0.2044,{"date":921,"score":795,"percentile":922},"2026-08-04",0.20381,{"date":924,"score":795,"percentile":925},"2026-08-05",0.20301,{"date":927,"score":795,"percentile":889},"2026-08-06",{"date":929,"score":795,"percentile":930},"2026-08-07",0.2032,{"date":932,"score":795,"percentile":933},"2026-08-08",0.20322,{"date":935,"score":795,"percentile":936},"2026-08-09",0.20313,{"date":938,"score":795,"percentile":939},"2026-08-10",0.20321,{"date":941,"score":795,"percentile":942},"2026-08-11",0.20414,{"date":944,"score":795,"percentile":945},"2026-08-12",0.20456,{"date":947,"score":795,"percentile":948},"2026-08-13",0.20482,{"date":950,"score":795,"percentile":951},"2026-08-14",0.20505,{"date":953,"score":795,"percentile":954},"2026-08-15",0.20658,{"date":956,"score":795,"percentile":957},"2026-08-16",0.2068,{"date":959,"score":795,"percentile":960},"2026-08-17",0.206,{"date":962,"score":795,"percentile":963},"2026-08-18",0.20619,{"date":965,"score":795,"percentile":966},"2026-08-19",0.20699,{"date":968,"score":795,"percentile":969},"2026-08-20",0.2073,{"date":971,"score":795,"percentile":972},"2026-08-21",0.20756,{"date":974,"score":795,"percentile":975},"2026-08-22",0.20759,{"date":977,"score":795,"percentile":978},"2026-08-23",0.20742,{"date":980,"score":981,"percentile":982},"2026-08-24",0.00282,0.20087,{"date":984,"score":981,"percentile":985},"2026-08-25",0.20107,{"date":987,"score":981,"percentile":988},"2026-08-26",0.20177,{"date":990,"score":981,"percentile":991},"2026-08-27",0.20178,{"date":993,"score":981,"percentile":994},"2026-08-28",0.202,{"date":996,"score":673,"percentile":997},"2026-08-29",0.26367,{"date":999,"score":673,"percentile":1000},"2026-08-30",0.26442,{"date":1002,"score":673,"percentile":1003},"2026-08-31",0.26456,{"date":1005,"score":673,"percentile":1006},"2026-09-01",0.26483,{"date":1008,"score":673,"percentile":1009},"2026-09-02",0.26511,{"date":1011,"score":673,"percentile":1012},"2026-09-03",0.26536,{"date":1014,"score":673,"percentile":1015},"2026-09-04",0.26564,{"date":1017,"score":673,"percentile":1018},"2026-09-05",0.26547,[1020,1036,1044],{"source":677,"cvss_v2_0":1021,"cvss_v3_0":1026,"cvss_v3_1":1031,"cvss_v4_0":1032},{"baseScore":1022,"baseSeverity":9,"vectorString":1023,"impactScore":1024,"exploitabilityScore":1025},4.6,"AV:N/AC:H/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",6.4,3.9,{"baseScore":675,"baseSeverity":1027,"vectorString":1028,"impactScore":1029,"exploitabilityScore":1030},"MEDIUM","CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",5.7,4.1,{"baseScore":675,"baseSeverity":1027,"vectorString":678,"impactScore":1029,"exploitabilityScore":1030},{"baseScore":1033,"baseSeverity":1034,"vectorString":1035,"impactScore":9,"exploitabilityScore":9},2.3,"LOW","CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",{"source":683,"cvss_v2_0":1037,"cvss_v3_0":9,"cvss_v3_1":1039,"cvss_v4_0":1041},{"baseScore":1022,"baseSeverity":9,"vectorString":1038,"impactScore":1024,"exploitabilityScore":1025},"AV:N/AC:H/Au:S/C:P/I:P/A:P",{"baseScore":675,"baseSeverity":1027,"vectorString":1040,"impactScore":1029,"exploitabilityScore":1030},"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",{"baseScore":1042,"baseSeverity":1034,"vectorString":1043,"impactScore":9,"exploitabilityScore":9},1.3,"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":684,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1045,"cvss_v4_0":1046},{"baseScore":675,"baseSeverity":9,"vectorString":1040,"impactScore":1029,"exploitabilityScore":1030},{"baseScore":1033,"baseSeverity":9,"vectorString":1035,"impactScore":9,"exploitabilityScore":9},[1048],{"ecosystem":1049,"name":1050,"vendor":1051,"product":1052,"cpe_part":9,"purl_type":1053,"purl_namespace":1051,"purl_name":1052,"source":9,"versions":1054},"Go","github.com/weaviate/weaviate","github.com/weaviate","weaviate","golang",[1055],{"version":1056,"is_range":1057,"range_type":1058,"version_start":9,"version_start_type":9,"version_end":1059,"version_end_type":1060,"fixed_in":9},"lt1_38_0_rc_0",true,"semver","1.38.0-rc.0","excluding"]