https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:02:36.626764+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366388 EUVD-2026-366388 2026-10-06T08:02:36.685673+00:00 EUVD-2026-366388 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85664 fkie_cve-2026-85664 2026-10-06T08:02:36.685711+00:00

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter values to exhaust server memory and cause denial of service during index compaction.

 https://cve.radiocsirt.org/vuln/ghsa-3q9g-fh5w-hp67 GHSA-3q9g-fh5w-hp67 2026-10-06T08:02:36.685743+00:00

Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create requests. Unauthenticated attackers can supply arbitrarily large parameter values to exhaust server memory and cause denial of service during index compaction.