Threats affecting pkg:github/milvus

Milvus versions up to 2.6.22 and version 3.0.0 contain an unauthenticated denial of service vulnerability. Remote attackers can send crafted HTTP GET requests to the management server on port 9091 to exploit an unprotected /management/stop endpoint. This endpoint bypasses REST API authentication middleware and allows attackers to shut down key service components, causing denial of service.