{"data":{"id":"dbd27ee4-390a-4a31-b4c5-e3a4d0e1a9fa","title":"CVE-2026-11479: A vulnerability has been found in yoanbernabeu grepai 0.35.0. This issue affects some unknown processing of the file…","summary":"A vulnerability in yoanbernabeu grepai 0.35.0 affects the processing of indexer/chunker.go in its Qdrant Backend component, leading to use of a weak hash (CWE-328). The attack may be performed remotely, but the exploitability is assessed as difficult, and the exploit has been publicly disclosed. The CVSS 4.0 base score from VulDB is rated LOW, and NIST has not yet provided an assessment.","solution":"The pull request to fix this issue (https://github.com/yoanbernabeu/grepai/pull/248) awaits acceptance. No fixed version is stated in the source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-11479","publishedAt":"2026-06-08T03:16:20.190Z","cveId":"CVE-2026-11479","cweIds":["CWE-327","CWE-328"],"cvssScore":"4.2","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/yoanbernabeu/grepai@<= 0.35.0"],"affectedPackageNames":["github.com/yoanbernabeu/grepai"],"affectedPackageRefs":["go:github.com/yoanbernabeu/grepai"],"affectedVendors":[],"affectedVendorsRaw":["grepai 0.35.0"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"grepai use of weak hash in Qdrant backend chunker","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.0016,"epssCheckedAt":"2026-11-04T18:09:14.050Z","kevDateAdded":null,"advisoryAliases":["GHSA-6h35-9p2w-3j3r"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:50.047Z","patchAvailable":null,"disclosureDate":"2026-06-08T03:16:20.190Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-20"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}