{"full_name":"The-Vibe-Company/quivr","owner":"The-Vibe-Company","name":"quivr","url":"https://github.com/The-Vibe-Company/quivr","description":"An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.","homepage":"https://www.thevibecompany.co/en/portfolio/quivr","topics":[],"language":"Go","license":"MIT","avatar":"https://avatars.githubusercontent.com/u/252322352?v=4","created_at":"2023-05-12T23:53:30Z","pushed_at":"2026-11-09T16:39:02Z","metrics":{"stars":39644,"forks":3727,"watchers":277,"issues":1550,"prs":2343,"releases":364,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":34},"growth":{"day":{"stars":6,"forks":1,"base_day":"2026-11-09"}},"history":{"dates":["2026-11-09","2026-11-10"],"stars":[39638,39644],"forks":[3726,3727],"watchers":[277,277],"issues_open":[null,null],"prs_open":[null,null]},"boards":{},"same_owner":[],"issues":[{"number":2004,"title":"[Bug]: ","comments":24,"created_at":"2024-01-10T06:51:39Z"},{"number":3667,"title":"EU AI Act Compliance Scan Results — Sharing Findings for Feedback","comments":4,"created_at":"2026-03-17T06:02:27Z"},{"number":3717,"title":"[security] Hardcoded Flask secret key enables session cookie forgery","comments":1,"created_at":"2026-09-06T17:44:46Z"},{"number":3701,"title":"Fix Langfuse dependency incompatibility and upgrade to Python SDK v4","comments":1,"created_at":"2026-07-15T13:39:59Z"},{"number":3698,"title":"Prompt IDOR - any authenticated user can read and overwrite any prompt (system-prompt hijacking)","comments":1,"created_at":"2026-07-03T15:16:57Z"},{"number":3697,"title":"Chat IDOR - unauthenticated-of-ownership read, delete, and message injection on any chat","comments":1,"created_at":"2026-07-03T15:16:10Z"},{"number":3722,"title":"Feature request: surface a pay-per-call (x402) step when an external tool answers HTTP 402","comments":0,"created_at":"2026-09-25T15:09:09Z"},{"number":3716,"title":"[security] Arbitrary code execution via unsafe FAISS/pickle deserialization when loading a brain","comments":0,"created_at":"2026-09-06T17:43:04Z"}],"discussions":[{"number":3723,"title":"Over your own documents, silent truncation is indistinguishable from an absence in your data","comments":0,"category":"General","created_at":"2026-09-26T02:30:43Z"},{"number":3685,"title":"[removed]","comments":0,"category":"Show and tell","created_at":"2026-06-10T13:16:15Z"},{"number":3683,"title":"Survey: Does your AI agent have an identity problem?","comments":0,"category":"General","created_at":"2026-06-02T03:29:38Z"},{"number":3682,"title":"Test - will delete","comments":0,"category":"General","created_at":"2026-06-02T03:29:02Z"},{"number":3678,"title":"Investment analysis RAG with Claude Code — options flow scanner + price alerts (open source)","comments":0,"category":"General","created_at":"2026-05-13T13:31:53Z"},{"number":3675,"title":"Recommended way to use Quivr with LM Studio or Ollama for local chat + embeddings?","comments":1,"category":"Q&A","created_at":"2026-04-10T13:20:43Z"},{"number":3668,"title":"Pissbook: agent forum integration for Quivr","comments":0,"category":"Show and tell","created_at":"2026-03-22T23:32:06Z"},{"number":3652,"title":"Possible to use quivr with preconstructed vector store","comments":3,"category":"Q&A","created_at":"2025-08-28T15:36:42Z"}],"latest_release":{"name":"v2.0.2","tag":"v2.0.2","published_at":"2026-10-30T13:59:45Z","body":"## Quivr 2.0.2\n\n2.0.2 moves the search database to Weaviate 1.39.14. It changes no API, no configuration and no stored data. Upgrade any 2.0.x installation to it.\n\n### What Weaviate 1.39.14 fixes for Quivr\n\n- **Filtered searches no longer fail at random.** Quivr filters every vector and hybrid search to the scope of the request. Weaviate's default filtering strategy could crash such a search on a node of the vector graph with more links than expected, and the search then returned an error.\n- **Security:** CVE-2026-63209, in the compression library.\n- **Less memory.**\n  - Quivr compresses its vectors. Compressed indexes now drop the uncompressed vector cache they no longer use, which can save gigabytes on a large index.\n  - Weaviate also stops keeping memory it never frees when writing to its in-memory tables.\n- **Safer restarts.** A crash right after a shutdown could leave a keyword-search file empty, and the database would then not start without a manual repair. Startup and shutdown are also faster.\n\nResults do not change. The hybrid search changes in 1.39.14 only affect `offset` paging and `nearText` queries, and Quivr uses neither.\n\n### Upgrade from 2.0.0 or 2.0.1\n\n1. Back up the search database volume.\n2. Deploy the 2.0.2 images and the new Weaviate pin from `deploy/infrastructure.json`, or the 2.0.2 compose bundle attached to this release for a single machine.\n3. Keep the same Weaviate volume.\n\nThis is a patch upgrade within one Weaviate minor version: no re-indexing and no Quivr migration. The test that upgrades a 1.37.15 volume through 1.38.20 to 1.39.14, then checks lexical, semantic and hybrid search, passes on this release.\n\nThe release images are signed and carry SBOMs, as described in [Security of Quivr releases](https://docs.quivr.thevibecompany.co/run-quivr/security).\n\n---\n\n## [2.0.2](https://github.com/The-Vibe-Company/quivr/compare/v2.0.1...v2.0.2) (2026-10-30)\n\n\n### Bug Fixes\n\n* **deploy:** pin Weaviate 1.39.14 for filtered-search panics and RQ memory ([#3976](https://github.com/The-Vibe-Company/quivr/issues/3976)) ([90d7d88](https://github.com/The-Vibe-Company/quivr/commit/90d7d88e3f4287a0fa648834dbc1546ae2569cd4))\n\n"},"readme":true,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}