Is github.com/milvus-io/milvus safe to use?

github.com/milvus-io/milvus has 6 known vulnerabilities on the latest version (v1.1.1). DepScope rates its health at 40/100 (high risk).

What is the latest version of github.com/milvus-io/milvus?

The latest version of github.com/milvus-io/milvus is v1.1.1, released 2021-06-16.

Does github.com/milvus-io/milvus have known vulnerabilities?

Yes. github.com/milvus-io/milvus has 6 known vulnerabilities. See depscope.dev/pkg/go/github.com/milvus-io/milvus for details.

Is github.com/milvus-io/milvus deprecated?

No, github.com/milvus-io/milvus is actively maintained. Latest release: v1.1.1 (2021-06-16).

What are alternatives to github.com/milvus-io/milvus?

DepScope has no curated alternatives for github.com/milvus-io/milvus at this time.

What license does github.com/milvus-io/milvus use?

github.com/milvus-io/milvus is licensed under Apache-2.0.

github.com/milvus-io/milvus

govv1.1.1

Milvus is a high-performance, cloud-native vector database built for scalable vector ANN search

License Apache-2.0permissive22 versions369 maintainers0 deps45,665 weekly dl

milvus-io/milvus

/ 100

Health

do not use

github.com/milvus-io/milvus has critical vulnerabilities — do not use

Update to >= 0.10.3-0.20260602041816-3d932f1c3e06 to fix known vulnerabilities

Moderate health score (40/100) — verify manually
2 critical vulnerabilities

Health breakdown0 – 100

25/25

maintenance

10/20

popularity

5/25

security

12/15

maturity

13/15

community

Vulnerabilities

2 critical4 low

Advisories (6)

Severity	ID	Summary	Fixed in
critical	BIT-milvus-2026-26190	Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise	2.6.10
low	BIT-milvus-2026-10814	milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery	0.10.3-0.20260602041816-3d932f1c3e06
critical	BIT-milvus-2025-64513	Milvus Proxy has a Critical Authentication Bypass Vulnerability	0.10.3-0.20251107071934-6102f001a971
unknown	BIT-milvus-2025-64513	Milvus Proxy has a Critical Authentication Bypass Vulnerability in github.com/milvus-io/milvus	0.10.3-0.20251107071934-6102f001a971
unknown	BIT-milvus-2026-26190	Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise in github.com/milvus-io/milvus	—
unknown	BIT-milvus-2026-10814	milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery in github.com/milvus-io/milvus	0.10.3-0.20260602041816-3d932f1c3e06

Maintainer trust

Active maintainers (3m)

29

Contributors (12m)

29

Primary author dominance

11%

GitHub stars

43,984

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/go/github.com/milvus-io/milvus

Last updated · 2021-06-16T06:49:09Z

Severity

Summary

Fixed in

critical

BIT-milvus-2026-26190

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

2.6.10

low

BIT-milvus-2026-10814

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

0.10.3-0.20260602041816-3d932f1c3e06

critical

BIT-milvus-2025-64513

Milvus Proxy has a Critical Authentication Bypass Vulnerability

0.10.3-0.20251107071934-6102f001a971

unknown

BIT-milvus-2025-64513

Milvus Proxy has a Critical Authentication Bypass Vulnerability in github.com/milvus-io/milvus

0.10.3-0.20251107071934-6102f001a971

unknown

BIT-milvus-2026-26190

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise in github.com/milvus-io/milvus

—

unknown

BIT-milvus-2026-10814

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery in github.com/milvus-io/milvus

0.10.3-0.20260602041816-3d932f1c3e06