| CVE-2026-45833 |
A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated…
|
9.4
Critical
|
Jun 12, 2026 |
| CVE-2026-45832 |
All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the…
|
8.8
High
|
Jun 12, 2026 |
| CVE-2026-45831 |
The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python project…
|
8.8
High
|
Jun 12, 2026 |
| CVE-2026-8828 |
A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users…
|
8.8
High
|
Jun 12, 2026 |
| CVE-2026-45830 |
A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated…
|
8.8
High
|
Jun 12, 2026 |
| CVE-2026-45829 |
A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an…
|
10.0
Critical
|
May 18, 2026 |