Repository navigation
Security vulnerability report submitted via security@ email #1028
Description
Describe the bug:
I have sent a responsible disclosure report to security@zilliz.com as per your disclosure policy https://zilliz.com/how-to-report-security-vulnerabilities regarding two confirmed vulnerabilities in Attu 2.6.5 .
The report includes the vulnerabilities details, impact analysis and affected locations
Please check the security@ inbox and confirm receipt of the report.
Attu version: 2.6.5
Activity
shanghaikid commentedon Sep 3, 2026
Thank you for reporting this through our responsible disclosure channel.
The Attu 2.6.x release line is no longer maintained, so we do not plan to release further fixes for v2.6.5. Please upgrade to Attu v3.0.0, which supports Milvus 2.6.0 and later.
If the reported vulnerabilities are still reproducible in v3.0.0, please update the report through
security@zilliz.com. To protect the disclosure, please do not post vulnerability details in this public issue.