Maintainer Mode
Sign in with GitHub

python3Packages.chromadb

chromadb 1.5.9 · pkgs/development/python-modules/chromadb/default.nix
Sign in to subscribe
Health
Risk
risk 68 critical
  • +60 4 open advisories
  • +8 an OSV advisory has a public exploit (CISA)
Version
1.5.9 no newer release known to repology
Channels
master 1.5.9 · nixos-unstable 1.5.9 · nixos-26.05 1.5.9 no channel is behind master
Hydra
no finished build of nixpkgs/unstable/python3Packages.chromadb.x86_64-linux
Advisories
GHSA-2wm9-hf6c-p5cr high 8.8 EPSS 0.5% ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection (OSV, for this version)
CVE-2026-45830
GHSA-36p7-vc44-83pf critical 9.4 public exploit EPSS 0.6% ChromaDB has a code injection vulnerability (OSV, for this version)
CVE-2026-45833
GHSA-f4j7-r4q5-qw2c critical 10.0 public exploit ChromaDB Python project has a pre-authentication code injection vulnerability (OSV, for this version)
CVE-2026-45829
GHSA-xph7-9rjv-w5fr high 8.8 EPSS 0.4% ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to (OSV, for this version)
CVE-2026-45831
Packaging
not read yet: the next index sweep reads it
Maintainers
fabaff, sarahec
Pull requests 1
treewide: don’t set `ulimit -n` in builds draft
#351783 by emilazy · opened 23mo ago
Issues 0
None open.