weaviate

v1.38.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Vector Databases

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

approximate-nearest-neighbor-search generative-search grpc hnsw hybrid-search image-search

+13 more

information-retrieval mlops nearest-neighbor-search neural-search recommender-system search-engine semantic-search semantic-search-engine similarity-search vector-db vector-search-engine vectors weaviate

Affected surfaces

auth deps

Summary

AI summary

Fixes across backup, replication, usage module, config validation, and Docker image updates; no breaking changes or new features.

Full changelog

Breaking Changes

none

New Features

none

Fixes

fix(backup): return 422 instead of 500 when backend module is missing by @gkampitakis in https://github.com/weaviate/weaviate/pull/11666
Add env vars to disable bucket access check by @dirkkul in https://github.com/weaviate/weaviate/pull/11645
backport: chore: add slack notifier for release notes (#11576) by @moogacs in https://github.com/weaviate/weaviate/pull/11674
fix: disable debug endpoints by default by @amourao in https://github.com/weaviate/weaviate/pull/11173
fix(config): validate replication factor bounds at startup by @gkampitakis in https://github.com/weaviate/weaviate/pull/11679
chore(gh-workflow): adjust the slack notify workflow msg by @moogacs in https://github.com/weaviate/weaviate/pull/11697
security(Dockerfile): update Alpine image version to 3.24 by @antas-marcin in https://github.com/weaviate/weaviate/pull/11698
Handle missing boost properties and property type validation by @trengrj in https://github.com/weaviate/weaviate/pull/11699
Fix race in usage module startup by @dirkkul in https://github.com/weaviate/weaviate/pull/11684
fix: extend token fetch retry budget by @gkampitakis in https://github.com/weaviate/weaviate/pull/11713
feat(backup): log goroutine pool size when starting a backup by @gkampitakis in https://github.com/weaviate/weaviate/pull/11705
feat(usage-module): drop schema recording from usage reporting by @gkampitakis in https://github.com/weaviate/weaviate/pull/11704
perf: lazy loading for property lengths by @amourao in https://github.com/weaviate/weaviate/pull/11711
test: add tests for collections being created with empty vector index type by @antas-marcin in https://github.com/weaviate/weaviate/pull/11718
fix(runtime-config): add validation for default_vector_index runtime setting by @antas-marcin in https://github.com/weaviate/weaviate/pull/11719
Add counter for blocked namespace requests by @dirkkul in https://github.com/weaviate/weaviate/pull/11721
prepare release v1.37.9 by @antas-marcin in https://github.com/weaviate/weaviate/pull/11720
Fix goroutine leak in listing all s3 backups by @dirkkul in https://github.com/weaviate/weaviate/pull/11702
Increase timeout for ObjectTTL test in case multi node cluster is not ready yet by @dirkkul in https://github.com/weaviate/weaviate/pull/11651
fix: shebang in tools/dev/run_dev_server.sh script by @antas-marcin in https://github.com/weaviate/weaviate/pull/11722
Reduce goroutines spawned by cyclemanager by @dirkkul in https://github.com/weaviate/weaviate/pull/11701
Gut the replicated indices queue feature due to lack of use by @tsmith023 in https://github.com/weaviate/weaviate/pull/11654
feat(replication): turn on async repl if erf=1 and arf>1 by @tsmith023 in https://github.com/weaviate/weaviate/pull/11638
Fix MCP hybrid search returning objects without properties by @g-despot in https://github.com/weaviate/weaviate/pull/11707
Switch cycle manager to backoff on idle by @dirkkul in https://github.com/weaviate/weaviate/pull/11703
test(replication): stabilize TestReadRepairDeleteOnConflict against node-boot timing by @jeroiraz in https://github.com/weaviate/weaviate/pull/11748
Dont timeout shard halting in unrelated unittest by @dirkkul in https://github.com/weaviate/weaviate/pull/11727
Fix wrong authz check for get groups for role by @dirkkul in https://github.com/weaviate/weaviate/pull/11728
Fix backup concurrency calculation by @dirkkul in https://github.com/weaviate/weaviate/pull/11733

Full Changelog: https://github.com/weaviate/weaviate/compare/v1.38.0...v1.38.1

Security Fixes

security(Dockerfile): update Alpine image version to 3.24

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track weaviate

Get notified when new releases ship.

About weaviate

Weaviate is an open-source vector database that stores both objects and vectors, allowing for the combination of vector search with structured filtering with the fault tolerance and scalability of a cloud-native database.

All releases →