LoginSign Up
← Back to all sparks
W

Weaviate

DEVOPS
Velocity5.0

Open-source vector database for AI applications and semantic search

weaviate.io ↗

Weaviate patched its whole cloud estate in 17 hours after the eMudhra CA compromise.

vector databasesecurityagent memoryfiltered searchquantization
◆Current state
Weaviate's October has been security-heavy: v1.39.3 fixed a Google-module credential leak and then a nearObject cross-collection vector disclosure. Now it reports rotating certificates across its customer estate and platform within 17 hours of the eMudhra leak. On the product side, 1.40 brings PathSeer adaptive filtered search, and Engram is now a Claude Code plugin for persistent agent memory.
◆Where it's heading
Two threads run in parallel: index and quantization research (HFresh, 4-bit RQ, PathSeer) that lowers memory cost at scale, and an agent-memory layer built on Engram. The security posts suggest Weaviate is preparing to show its operational record to enterprise buyers.
◆Prediction
Expect 1.40 to reach GA with PathSeer, along with further Engram integrations for other coding agents.

◆Recent moves

  1. 19d ago

    Deprecating the GraphQL API: timeline and migration paths

    ⚡ SPARK

    Weaviate has started a dated retirement of its GraphQL API, with separate paths for Cloud and self-hosted users. The move follows a 1.39.3 security fix in a GraphQL operator, though the entry does not link the two.

    View source ↗
  2. 23d ago

    How Weaviate responded to the eMudhra certificate compromise

    An incident write-up: Weaviate rotated certificates exposed by the eMudhra CA leak across its cloud in under 17 hours. Customers didn't have to do anything, but after two October CVE fixes it adds to the operational record.

    View source ↗
  3. 1mo ago

    v1.39.3 fixes cross-collection vector leak in nearObject

    v1.39.3 closes an authorization gap where the nearObject GraphQL operator could expose vectors across collections. It is the second security release in two weeks, and it lands on the isolation boundary that matters most as Weaviate pitches multi-tenant agent memory through Engram.

    View source ↗
  4. 1mo ago

    Weaviate 1.40: 4-bit RQ GA, multi-vector HFresh, PathSeer filtering

    Weaviate 1.40 makes named-vector dropping and 4-bit Rotational Quantization GA, adds multi-vector embeddings on HFresh and PathSeer filtering, and changes vector configuration defaults. The changed defaults are the part existing deployments should check before upgrading.

    View source ↗
  5. 1mo ago

    PathSeer: Adaptive Filtered Vector Search

    Weaviate 1.40 adds PathSeer, an adaptive HNSW filter strategy from a SIGMOD 2026 paper, contributed by the paper's first author. It joins sweeping and ACORN, giving users a third option for search filters that cut out a lot of results.

    View source ↗
  6. 1mo ago

    Persistent memory for Claude Code with Weaviate Engram

    Engram becomes a Claude Code plugin that gives the coding agent persistent memory. It's Weaviate's clearest move up the stack into agent infrastructure.

    View source ↗