weaviate

Direct and transitive dependency freshness, license, and CVE exposure from the latest SBOM.

Security Export CSV

100% Freshness

629 Dependencies

3 Outdated

0 Stale

9.7 Avg Behind

Dependency List

Latest release v1.35.19

All 628 Outdated 3 Has CVE 4 GPL 0

Dependency	Type	Current	Latest	Behind	CVE	License
github.com/docker/docker golang	Direct	v28.5.2+incompatible	—	—	2 high	Apache-2.0
github.com/docker/docker golang	Direct	v28.5.2+incompatible	—	—	2 high	Apache-2.0
github.com/aws/aws-sdk-go golang	Direct	v1.44.298	—	—	2 unknown	Apache-2.0
github.com/aws/aws-sdk-go golang	Transitive	v1.44.298	—	—	2 unknown	Apache-2.0

License Breakdown

Apache-2.0 245

MIT 129

Unknown 79

BSD-3-Clause 54

BSD-3-Clause AND LicenseRef-scancode-google-patent-license-golang 25

Apache-2.0 AND BSD-3-Clause 24

MPL-2.0 22

BSD-2-Clause 17

Apache-2.0 AND MIT 9

BSD-3-Clause AND MIT 4

LicenseRef-scancode-generic-cla AND MIT 4

ISC 3

Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause 2

Apache-2.0 AND BSD-3-Clause AND MIT 2

Apache-2.0 AND CC-BY-SA-4.0 2

Apache-2.0 AND LicenseRef-scancode-dco-1.1 AND MIT 2

BSD-3-Clause AND CC0-1.0 AND LicenseRef-scancode-public-domain AND LicenseRef-scancode-unknown-license-reference AND LicenseRef-scancode-w3c-03-bsd-license AND MIT 2

MIT OR Python-2.0.1 2

BSD-2-Clause AND BSD-3-Clause 1

CVE Severity

critical 0

high 2

medium 0

low 0

unknown 2