Skip to content
ai-supply.store
DiscoverCategoriesLeaderboardsCommunityAgent APIFAQ
Sign inSign up free
catalog / Data & ETL / Milvus
⇄ConnectorData & ETLFree

Milvus

Cloud-native open-source vector database built for billion-scale similarity search and AI applications.

@ai-supply
Installs236k
⟳ upstream v2.6.21 · updated 3d ago
↗ Source repository
← More Data & ETLData & ETL leaderboard →How we grade security →Source ↗
! Grade B · 88/100 · ReviewSecurity assessment
✓No compromise signals29capabilities surfaced1known CVE7of 20 OWASP controls clear
Suspicious network referencesBroad capability surfaceSuspicious code patternsSuspicious code patterns
scanned 1d ago·osv · gitleaks · opengrep · picklescan + heuristics·full breakdown in the Security tab ↓

Milvus

Milvus is a purpose-built open-source vector database designed for high-performance similarity search at scale. It supports multiple index types (HNSW, IVF, FLAT, SCANN) and hybrid scalar+vector filtering, making it the vector layer for production RAG, recommendation, and multimodal search applications.

Key Features

  • Billion-scale search: Horizontally scalable with independent compute and storage nodes
  • Multiple index types: HNSW, DiskANN, IVF_FLAT, IVF_SQ8, SCANN for different speed/accuracy trade-offs
  • Hybrid search: Combine dense vector ANN with sparse BM25 keyword and scalar field filters
  • Multi-tenancy: Collection-level isolation with role-based access control
  • Streaming ingestion: Real-time data ingestion via Kafka/Pulsar integration
  • MilvusLite: Embedded mode that runs in-process for development and edge deployments

Quick Start

# Start Milvus standalone
wget https://raw.githubusercontent.com/milvus-io/milvus/master/scripts/standalone_embed.sh
bash standalone_embed.sh start

pip install pymilvus
from pymilvus import MilvusClient

client = MilvusClient("milvus_demo.db")  # MilvusLite
client.create_collection("my_embeddings", dimension=768)
client.insert("my_embeddings", [{"id": 1, "vector": [0.1]*768}])
results = client.search("my_embeddings", data=[[0.1]*768], limit=5)

Add to ai-supply

npx ai-supply add milvus-vector-database

Curated mirror of the open-source Milvus (Apache-2.0). Get it from the source.

Rating rank
#1
of 24 in Data & ETL
Install rank
#5
of 24 in Data & ETL
Security score
88/100 · B
review
Security rank
#6
of 24 in Data & ETL
Installs
236k
cat avg 164k
This listing vs category average
Installs
this
cat avg
Security (of 100)
this
cat avg
Adoption trend
See the Data & ETL leaderboard →
! Security: Review · 8888/100 · grade Bscanned 1d ago
✓ no compromise signals30 risk-surface · 8/20 OWASP controls flagged

Compromise signals — malicious or tampered code (leaked secrets, backdoors, a dropped executable) — reduce the score, and known dependency CVEs carry a bounded penalty (they warrant review but never QUARANTINE — update the dependency to clear). Other dangerous-by-capability traits are risk surface, expected for some capabilities. Every finding is mapped to its OWASP control below.

What this capability can do · med confidence (static)
⚑ filesystem⚑ shell⚑ network⚑ secretsinstall: script:milvus-io-milvus-f7a5984/Makefileinstall: script:milvus-io-milvus-f7a5984/build/rpm/setup-env.sh
egress → goproxy.cn, code.claude.com, jenkins.milvus.io, api.github.com, www.contributor-covenant.org, milvus.io, docs.github.com, developercertificate.org +32
auth: api_keygoproxy.cngithub.comcode.claude.comjenkins.milvus.ioapi.github.comwww.contributor-covenant.orgmilvus.iodocs.github.comscope: credential:scope: client_id:xxxscope: db:database_name

Findings mapped to the OWASP Top 10 for LLM Applications (2025) and the OWASP Machine Learning Security Top 10. Expand any flagged control for the exact findings — compromise reduces the score; expected/risk-surface do not, except a known CVE, which carries a small bounded penalty (high/critical → Review).

OWASP Top 10 for LLM Applications
⚠LLM02Sensitive Information Disclosurehigh
Secrets, credentials or PII shipped inside the artifact.
•Embedded credentials — found: private key · milvus-io-milvus-f7a5984/configs/cert/ca.key (CWE-798)expected
•Low-confidence secret match — 1 possible: generic-api-key · milvus-io-milvus-f7a5984/.env (CWE-798)risk surface
⚠LLM03Supply Chainhigh
Vulnerable/compromised dependencies, models or archives in the artifact.
•Dependency manifest — 5 pip requirements declared · milvus-io-milvus-f7a5984/cmd/tools/binlogv2/requirements.txtrisk surface
•Dependency manifest — 2 pip requirements declared · milvus-io-milvus-f7a5984/deployments/offline/requirements.txtrisk surface
•Vulnerable dependencies — 73 known vulnerabilities in: golang.org/x/net@0.49.0, golang.org/x/sys@0.40.0, golang.org/x/text@0.33.0, google.golang.org/grpc@1.80.0, stdlib@1.24.9, duckdb@0.9.0, streamlit@1.28.0, github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@1.6.7 (CWE-1395)known CVE · -12 pts
⚠LLM05Improper Output Handlinghigh
Code that pipes model/user output into shell, eval, SQL or paths unsafely.
•Suspicious code patterns — destructive rm -rf / · milvus-io-milvus-f7a5984/DEVELOPMENT.md (CWE-78)risk surface
•Suspicious code patterns — pipe-to-shell install · milvus-io-milvus-f7a5984/Makefile (CWE-494)risk surface
•Suspicious code patterns — world-writable chmod 777 · milvus-io-milvus-f7a5984/build/builder.sh (CWE-732)risk surface
•Suspicious code patterns — destructive rm -rf /; world-writable chmod 777 · milvus-io-milvus-f7a5984/build/docker/builder/cpu/amazonlinux2023/Dockerfile (CWE-78)risk surface
•Suspicious code patterns — destructive rm -rf /; pipe-to-shell install; world-writable chmod 777 · milvus-io-milvus-f7a5984/build/docker/builder/gpu/ubuntu20.04/Dockerfile (CWE-78)risk surface
•Suspicious code patterns — OS command execution · milvus-io-milvus-f7a5984/cmd/tools/binlogv2/minio_client.py (CWE-78)risk surface
⚠LLM06Excessive Agencyhigh
Over-broad tool/permission surface or unrestricted egress.
•External endpoints declared — 1 distinct host(s) · milvus-io-milvus-f7a5984/.clang-formatexpected
•External endpoints declared — 2 distinct host(s) · milvus-io-milvus-f7a5984/.contributorsexpected
•Broad capability surface — 3 high-impact capability categories referenced — verify least-privilege · milvus-io-milvus-f7a5984/.github/workflows/daily-release.yml (CWE-272)risk surface
•External endpoints declared — 7 distinct host(s) · milvus-io-milvus-f7a5984/CONTRIBUTING.mdexpected
•External endpoints declared — 6 distinct host(s) · milvus-io-milvus-f7a5984/DEVELOPMENT.mdexpected
•External endpoints declared — 4 distinct host(s) · milvus-io-milvus-f7a5984/Makefileexpected
•External endpoints declared — 18 distinct host(s) · milvus-io-milvus-f7a5984/README.mdexpected
•External endpoints declared — 16 distinct host(s) · milvus-io-milvus-f7a5984/README_CN.mdexpected
•External endpoints declared — 5 distinct host(s) · milvus-io-milvus-f7a5984/build/README.mdexpected
•External endpoints declared — 3 distinct host(s) · milvus-io-milvus-f7a5984/build/deb/README.mdexpected
•Egress to a private/loopback host — 0.0.0.0 · milvus-io-milvus-f7a5984/build/deb/build_deb.sh (CWE-918)expected
•Egress to a private/loopback host — 127.0.0.1, 0.0.0.0 · milvus-io-milvus-f7a5984/deployments/binary/README.md (CWE-918)expected
•Egress to a private/loopback host — 127.0.0.1 · milvus-io-milvus-f7a5984/deployments/docker/dev/docker-compose-apple-silicon.yml (CWE-918)expected
•Broad capability surface — 4 high-impact capability categories referenced — verify least-privilege · milvus-io-milvus-f7a5984/internal/core/build-support/cpplint.py (CWE-272)risk surface
⚠LLM07System Prompt Leakagehigh
Secrets, internal hosts or proprietary logic exposed in shipped prompts.
•Internal host / private infrastructure reference — shipped content references a private IP range or internal-only host · milvus-io-milvus-f7a5984/build/config/topology/multicluster.json (CWE-200)risk surface
•Embedded credentials — found: private key · milvus-io-milvus-f7a5984/configs/cert/ca.key (CWE-798)expected
•Low-confidence secret match — 1 possible: generic-api-key · milvus-io-milvus-f7a5984/.env (CWE-798)risk surface
⚠LLM10Unbounded Consumptionmedium
Unbounded loops/recursion causing DoS or runaway cost.
Enforced at runtime by the gateway (rate limits + spend caps + size caps); static check flags unbounded loops.
•Potentially unbounded loop — an infinite loop (while True / while(1) / for(;;)) may cause runaway consumption · milvus-io-milvus-f7a5984/cmd/tools/binlogv2/minio_client.py (CWE-835)risk surface
§LLM09MisinformationGovernance
Artifacts designed to produce false/deceptive output.
Detectable only by runtime behavioral evaluation; addressed via responsible-use attestation.
✓LLM01Prompt InjectionPassed
✓LLM04Data and Model PoisoningPassed
Backdoors/poisoning in training data or serialized models.
Behavioral poisoning needs model execution; static check covers unsafe serialization + dataset skew only.
✓LLM08Vector and Embedding WeaknessesPassed
PII or plaintext source leakage in embedding/vector exports.
Embedding inversion/poisoning is largely runtime; static check covers PII in vector exports.
OWASP Machine Learning Security Top 10
⚠ML06AI Supply Chainhigh
Compromised PyPI/npm packages, typosquats, unsafe serialized models.
•Dependency manifest — 5 pip requirements declared · milvus-io-milvus-f7a5984/cmd/tools/binlogv2/requirements.txtrisk surface
•Dependency manifest — 2 pip requirements declared · milvus-io-milvus-f7a5984/deployments/offline/requirements.txtrisk surface
•Vulnerable dependencies — 73 known vulnerabilities in: golang.org/x/net@0.49.0, golang.org/x/sys@0.40.0, golang.org/x/text@0.33.0, google.golang.org/grpc@1.80.0, stdlib@1.24.9, duckdb@0.9.0, streamlit@1.28.0, github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@1.6.7 (CWE-1395)known CVE · -12 pts
⚠ML09Output Integrityhigh
Middleware tampering with model outputs in transit.
Gateway enforces TLS + response integrity; static check flags output-rewriting code.
•Suspicious code patterns — destructive rm -rf / · milvus-io-milvus-f7a5984/DEVELOPMENT.md (CWE-78)risk surface
•Suspicious code patterns — pipe-to-shell install · milvus-io-milvus-f7a5984/Makefile (CWE-494)risk surface
•Suspicious code patterns — world-writable chmod 777 · milvus-io-milvus-f7a5984/build/builder.sh (CWE-732)risk surface
•Suspicious code patterns — destructive rm -rf /; world-writable chmod 777 · milvus-io-milvus-f7a5984/build/docker/builder/cpu/amazonlinux2023/Dockerfile (CWE-78)risk surface
•Suspicious code patterns — destructive rm -rf /; pipe-to-shell install; world-writable chmod 777 · milvus-io-milvus-f7a5984/build/docker/builder/gpu/ubuntu20.04/Dockerfile (CWE-78)risk surface
•Suspicious code patterns — OS command execution · milvus-io-milvus-f7a5984/cmd/tools/binlogv2/minio_client.py (CWE-78)risk surface
§ML01Input Manipulation (Adversarial)Governance
Models vulnerable to adversarial perturbations.
Requires runtime robustness evaluation; addressed via publisher robustness attestation.
§ML03Model InversionGovernance
Training data reconstructable from a model's outputs.
Runtime/evaluation property; addressed via model-card data-provenance + DP attestation.
§ML04Membership InferenceGovernance
Determining whether a record was in the training set.
Runtime/evaluation property; addressed via overfitting disclosure + DP attestation.
§ML08Model SkewingGovernance
Models trained on skewed data producing biased output.
Requires fairness evaluation; addressed via model-card bias/limitations disclosure.
✓ML02Data PoisoningPassed
Poisoned training datasets with triggers or anomalous distributions.
Static check covers trigger phrasing, PII and label skew; full poisoning detection is runtime.
✓ML05Model TheftPassed
Unlicensed re-distribution / license-incompatible derivatives.
Static check verifies license declaration; extraction throttling is runtime.
✓ML07Transfer Learning AttackPassed
Backdoored base models / LoRA adapters propagating to derivatives.
Backdoor detection needs behavioral probing; static check covers unsafe serialization + provenance.
✓ML10Model Poisoning (Weights)Passed
Tampered model weight files; integrity must be verifiable.
Static check enforces safe formats + records a content hash for downstream verification.
Other findings (38) · hygiene / uncategorized
•Unrecognized file type — '.clang-format' is not on the allowlist · milvus-io-milvus-f7a5984/.clang-formatrisk surface
•Unrecognized file type — '.clang-tidy' is not on the allowlist · milvus-io-milvus-f7a5984/.clang-tidyrisk surface
•Unrecognized file type — '.clang-tidy-ignore' is not on the allowlist · milvus-io-milvus-f7a5984/.clang-tidy-ignorerisk surface
•Unrecognized file type — '.contributors' is not on the allowlist · milvus-io-milvus-f7a5984/.contributorsrisk surface
•Suspicious network references — suspicious TLD (1 URLs) · milvus-io-milvus-f7a5984/.devcontainer.jsonrisk surface
•Unrecognized file type — '.dockerignore' is not on the allowlist · milvus-io-milvus-f7a5984/.dockerignorerisk surface
•Unrecognized file type — '.env' is not on the allowlist · milvus-io-milvus-f7a5984/.envrisk surface
•Unrecognized file type — '.?' is not on the allowlist · milvus-io-milvus-f7a5984/.github/OWNERSrisk surface
•Unrecognized file type — '.gitignore' is not on the allowlist · milvus-io-milvus-f7a5984/.gitignorerisk surface
•Unrecognized file type — '.groovy' is not on the allowlist · milvus-io-milvus-f7a5984/build/ci/jenkins/ChaosTest.groovyrisk surface
•Suspicious network references — raw IP URL (2 URLs) · milvus-io-milvus-f7a5984/build/deb/build_deb.shrisk surface
•Unrecognized file type — '.docs' is not on the allowlist · milvus-io-milvus-f7a5984/build/deb/debian/milvus-docs.docsrisk surface
•Unrecognized file type — '.conf' is not on the allowlist · milvus-io-milvus-f7a5984/build/deb/scripts/milvus.confrisk surface
•Unrecognized file type — '.service' is not on the allowlist · milvus-io-milvus-f7a5984/build/deb/scripts/milvus.servicerisk surface
•Unrecognized file type — '.base' is not on the allowlist · milvus-io-milvus-f7a5984/build/docker/milvus/gpu/ubuntu20.04/Dockerfile.baserisk surface
•Unrecognized file type — '.spec' is not on the allowlist · milvus-io-milvus-f7a5984/build/rpm/milvus.specrisk surface
•Unrecognized file type — '.mod' is not on the allowlist · milvus-io-milvus-f7a5984/client/go.modrisk surface
•Unrecognized file type — '.sum' is not on the allowlist · milvus-io-milvus-f7a5984/client/go.sumrisk surface
•Unrecognized file type — '.proto' is not on the allowlist · milvus-io-milvus-f7a5984/cmd/tools/migration/backend/backup_header.protorisk surface
•Unrecognized file type — '.key' is not on the allowlist · milvus-io-milvus-f7a5984/configs/cert/ca.keyrisk surface
•Unrecognized file type — '.pem' is not on the allowlist · milvus-io-milvus-f7a5984/configs/cert/ca.pemrisk surface
•Unrecognized file type — '.srl' is not on the allowlist · milvus-io-milvus-f7a5984/configs/cert/ca.srlrisk surface
•Unrecognized file type — '.csr' is not on the allowlist · milvus-io-milvus-f7a5984/configs/cert/client.csrrisk surface
•Unrecognized file type — '.cnf' is not on the allowlist · milvus-io-milvus-f7a5984/configs/ssl/openssl-fips.cnfrisk surface
•Suspicious network references — raw IP URL (7 URLs) · milvus-io-milvus-f7a5984/deployments/binary/README.mdrisk surface
•Unrecognized file type — '.cfg' is not on the allowlist · milvus-io-milvus-f7a5984/deployments/docker/cluster-distributed-deployment/ansible.cfgrisk surface
•Unrecognized file type — '.ini' is not on the allowlist · milvus-io-milvus-f7a5984/deployments/docker/cluster-distributed-deployment/inventory.inirisk surface
•Suspicious network references — raw IP URL (5 URLs) · milvus-io-milvus-f7a5984/deployments/docker/dev/docker-compose-apple-silicon.ymlrisk surface
•Suspicious network references — raw IP URL (3 URLs) · milvus-io-milvus-f7a5984/deployments/docker/standalone/docker-compose.ymlrisk surface
•Disallowed file type — '.bat' executables are not permitted · milvus-io-milvus-f7a5984/deployments/windows/cleanup_data.bat (CWE-434)risk surface
•Unrecognized file type — '.cpp' is not on the allowlist · milvus-io-milvus-f7a5984/docs/design-docs/design_docs/mutable-columns-prototype/fold_correctness.cpprisk surface
•Unrecognized file type — '.graffle' is not on the allowlist · milvus-io-milvus-f7a5984/docs/developer_guides/figs/figs.grafflerisk surface
•Opaque binary content — non-text payload not statically analyzable · milvus-io-milvus-f7a5984/docs/developer_guides/figs/figs.grafflerisk surface
•Unrecognized file type — '.cmake' is not on the allowlist · milvus-io-milvus-f7a5984/internal/core/cmake/BuildUtils.cmakerisk surface
•Unrecognized file type — '.hxx' is not on the allowlist · milvus-io-milvus-f7a5984/internal/core/cmake/milvus_pch.hxxrisk surface
•Unrecognized file type — '.h' is not on the allowlist · milvus-io-milvus-f7a5984/internal/core/src/bitset/bitset.hrisk surface
•Unrecognized file type — '.in' is not on the allowlist · milvus-io-milvus-f7a5984/internal/core/src/milvus_core.pc.inrisk surface
•Unrecognized file type — '.c' is not on the allowlist · milvus-io-milvus-f7a5984/internal/core/src/rescores/Murmur3.crisk surface
✔ verified source · pinned milvus-io-milvus-f7a5984 · changed since last scan (+13 pts)
Check against a policy

The same gate an agent runs before installing (POST /api/v1/trust/milvus-vector-database/check). Click a policy:

Consume Milvus programmatically. Authenticate with an API key or session — see Authorize an agent.

# Agents: CHECK BEFORE YOU INSTALL (no auth) — score, grade, level, capability manifest
curl https://ai-supply.store/api/v1/trust/milvus-vector-database

# Gate against your org policy (returns { pass, violations })
curl -X POST https://ai-supply.store/api/v1/trust/milvus-vector-database/check \
  -H "Content-Type: application/json" \
  -d '{"minGrade":"B","denyPermissions":["shell"],"denyUnknownEgress":true}'

# CLI
npx ai-supply add milvus-vector-database

# REST (install → download)
curl -X POST https://ai-supply.store/api/v1/listings/milvus-vector-database/install \
  -H "Authorization: Bearer $AIM_KEY"

# MCP tool
install_listing({ "slug": "milvus-vector-database" })
OpenAPI spec →
vlatest
! Security: Review · 881mo ago

Curated mirror — latest upstream source. See the repository for tagged releases.

Sign in and install this listing to leave a review.

More from @ai-supply

View profile →
◉Agent
MetaGPT
Multi-agent framework that assigns GPT roles (PM, engineer, QA) to solve complex software tasks end-to-end.
↓ 1.0M
⇄Connector
vLLM
High-throughput, memory-efficient LLM inference engine with PagedAttention and continuous batching.
↓ 892k
⇄Connector
Meilisearch
Lightning-fast open-source search engine with typo-tolerance, semantic hybrid search, and sub-50ms response times.
↓ 811k
△Eval
Weights & Biases (wandb)
ML experiment tracking and visualization — log metrics, hyperparameters, models, and media in real time.
↓ 784k
ai-supply.store

Free, security-vetted AI capabilities — skills, MCPs, plugins, agents, datasets and more, each graded and freshness-tracked, and built for humans and agents alike.

api · v3.1status · all green
Contact
support@ai-supply.storesecurity@ai-supply.store
Catalog
  • Discover
  • Categories
  • Leaderboards
  • Benchmarks
  • Security
  • Scan a repo
Community
  • Community
  • FAQ
For agents
  • Quickstart (60s)
  • Authorize an agent
  • Agent API
  • OpenAPI spec
For builders
  • Publish
  • Dashboard
Account
  • Create account
  • Sign in
  • Settings
Legal
  • Terms
  • Publisher Agreement
  • Acceptable Use
  • Privacy