VYPR

Voyager

by Spotify

CVEs (1)

  • CVE-2026-124959Nov 9, 2026
    risk 0.00cvss —epss —

    The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. An attacker can supply a crafted index file with an element count greater than the…