{"id":"GO-2025-4237","revision":"6a519ac0b53d43ff8309050d146cccfa","records":[{"revision":"6a519ac0b53d43ff8309050d146cccfa","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4237","aliases":["CVE-2025-67818","GHSA-7v39-2hx7-7c43"],"title":"Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip in github.com/weaviate/weaviate","description":"Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip in github.com/weaviate/weaviate","state":0,"publishedAt":"2025-12-15T20:15:46+00:00","modifiedAt":"2026-03-03T04:57:47.786219+00:00","affected":[{"ecosystem":"Go","name":"github.com/weaviate/weaviate","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.30.20"},{"kind":"introduced","version":"1.31.0-rc.0"},{"kind":"fixed","version":"1.31.19"},{"kind":"introduced","version":"1.32.0-rc.0"},{"kind":"fixed","version":"1.32.16"},{"kind":"introduced","version":"1.33.0-rc.0"},{"kind":"fixed","version":"1.33.4"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/advisories/GHSA-7v39-2hx7-7c43","https://nvd.nist.gov/vuln/detail/CVE-2025-67818","https://github.com/weaviate/weaviate/commit/169df2dc92bc232df62e8fab0a20db2e5371f7aa","https://github.com/weaviate/weaviate/commit/89c2270869e6d64f5b5276b8626c11cd816c6665","https://weaviate.io/blog/weaviate-security-release-november-2025"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4237","license":"OSV · upstream source license applies","key":"osv:GO-2025-4237","identifiers":["GO-2025-4237","CVE-2025-67818","GHSA-7v39-2hx7-7c43"]},"retained":false,"historicalAffected":[]}],"coverage":[]}