https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:36:14.645294+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-326904 EUVD-2026-326904 2026-10-02T12:36:14.690058+00:00 EUVD-2026-326904 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8828 fkie_cve-2026-8828 2026-10-02T12:36:14.690094+00:00

A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.

 https://cve.radiocsirt.org/vuln/ghsa-843m-rfxf-6v2g GHSA-843m-rfxf-6v2g 2026-10-02T12:36:14.690127+00:00

A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to.