Repository navigation
Security: milvus-io/milvus
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Missing authorization on client telemetry administration APIsGHSA-39xr-fgh7-mh3c published
Oct 28, 2026 by liliu-zModerate -
Import-job status APIs disclose cross-database metadataGHSA-6hp9-pxpj-9f64 published
Oct 28, 2026 by liliu-zModerate -
Import bypasses collection-level RBAC and reads Milvus internal storageGHSA-jh4h-22hq-x74p published
Sep 27, 2026 by LoveEachDayModerate -
Missing authorization on the metrics-port legacy REST business APIGHSA-gg6q-4562-83ww published
Oct 28, 2026 by liliu-zHigh -
Missing authentication and authorization on Milvus streaming gRPC endpointsGHSA-hr46-v5qw-wr2q published
Oct 28, 2026 by liliu-zHigh -
DescribeCollection cache and ID lookup bypass collection visibility checksGHSA-9xrh-vcf6-jc93 published
Oct 28, 2026 by liliu-zModerate -
Missing collection authorization on statistics and topology RPCsGHSA-cp38-9g49-9wvw published
Oct 28, 2026 by liliu-zModerate -
Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System CompromiseGHSA-7ppg-37fh-vcr6 published
Feb 11, 2026 by LoveEachDayCritical -
Critical Authentication Bypass Vulnerability in Milvus ProxyGHSA-mhjq-8c7m-3f7p published
Nov 10, 2025 by LoveEachDayCritical
Learn more about advisories related to milvus-io/milvus in the GitHub Advisory Database