Quickwit-oss vulnerabilities
We track 1 vulnerability in Quickwit-oss products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Quickwit-oss vulnerabilities
- 7.5 High severity
quickwit: Server-Side Request Forgery
Quickwit through 0.9.0 fails to validate the host and scheme of the queue_url parameter in SQS file sources, allowing attackers to make the node issue requests to arbitrary internal addresses. Attackers can supply a malicious queue_url to the create-source API