Chroma: ChromaDB has a code injection vulnerability
Affects: Chroma
Chroma vulnerabilities
- Product
- Chroma
- Vendor
- Chroma
- Kind
- Vector database
Securaity has published 5 advisories for Chroma: 1 Critical, 4 High.
Chroma is a vector database made and maintained by Chroma. A vector database stores embeddings, which are lists of numbers that represent pieces of text or images, so that an application can search by meaning instead of by exact words. This kind of software is often used to feed documents to AI assistants, so the assistant can draw on related material. Chroma is typically installed and run by developers who build AI search or assistant features that need to find related documents.
Advisories
Chroma: All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and…
Affects: Chroma
Chroma: ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a…
Affects: Chroma
Chroma: ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in…
Affects: Chroma
Chroma: ChromaDB Python project has a pre-authentication code injection vulnerability
Affects: Chroma