CVE-2026-11481

216.73.217.64

· Published 08/06/2026 03:16 · Modified 08/06/2026 14:57

Labels: CVE-2026-11481 2026-06-08 CVE-2026-11481 CWE-327 [email protected]

Essential information

Published: 08/06/2026 03:16
Modified: 08/06/2026 14:57
Author: —
Creator: —
CVSS: 1.1 LOW (v3) 1.1 LOW (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument content_hash can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. The exploitability is described as difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

NVD status

Status: Deferred — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
yoanbernabeu / grepai	`cpe:2.3:a:yoanbernabeu:grepai::::::::`