chromadb
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| ChromaDB Python project has a pre-authentication code injection vulnerability | chromadb | PyPI | Critical | No fix reported | |
| ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to | chromadbRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-cuda-rhel9 | PyPIRed Hat | High | No fix reported | |
| ChromaDB has a code injection vulnerability | chromadbRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-cuda-rhel9 | PyPIRed Hat | Critical | No fix reported | |
| ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection | chromadbRed Hat Enterprise Linux AI (RHEL AI) 3/rhelai3/bootc-cuda-rhel9 | PyPIRed Hat | High | No fix reported |