Skip to main content

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/getzep/graphiti

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Join the discussion

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Join the discussion

CVE-2026-32247 is a high-severity Cypher injection vulnerability in getzep's Graphiti framework versions prior to 0.28.2. The flaw arises from improper neutralization of special elements in data query logic, specifically in the construction of Cypher label expressions for non-Kuzu backends like Neo4j, FalkorDB, and Neptune. Attackers can exploit this by injecting malicious label values through SearchFilters.node_labels or via prompt injection against LLM clients that trigger vulnerable search_nodes calls. This can lead to unauthorized data access and compromise of confidentiality and integrity without requiring user interaction, though some privileges are needed. The issue was fixed in version 0.28.2 by improving input validation and parameterization.

Join the discussion

Showing 1 to 3 of 3 results

Filters:Package: pkg:github/getzep/graphiti
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses