CH
Vendor
Chroma
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45833 | CH ChromaDB Chroma | 8.8 | Jun 12 | A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a… |
| CVE-2026-45832 | CH ChromaDB Chroma | 8.8 | Jun 12 | All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass authorization… |
| CVE-2026-45831 | CH ChromaDB Chroma | 8.8 | Jun 12 | The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project evaluates whether a user holds a given permission but never… |
| CVE-2026-8828 | CH ChromaDB Chroma | 8.8 | Jun 12 | A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any… |
| CVE-2026-45830 | CH ChromaDB Chroma | 8.8 | Jun 12 | A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in… |
| CVE-2026-45829 | CH ChromaDB Chroma | 10.0 | May 18 | A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server… |