https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:12:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-07111 bdu:2026-07111 https://cve.radiocsirt.org/vuln/bdu:2026-07111 https://cve.radiocsirt.org/vuln/euvd-2026-337824 EUVD-2026-337824 https://cve.radiocsirt.org/vuln/euvd-2026-337824 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45829 <p>A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.</p> <p>A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45829 https://cve.radiocsirt.org/vuln/ghsa-f4j7-r4q5-qw2c <p><strong>Affected:</strong> PyPI: chromadb</p> <p>A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.</p> <p><strong>Affected:</strong> PyPI: chromadb</p> <p>A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.</p> https://cve.radiocsirt.org/vuln/ghsa-f4j7-r4q5-qw2c https://cve.radiocsirt.org/vuln/pysec-2026-311 <p><strong>Affected:</strong> PyPI: chromadb</p> <p>A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.</p> <p><strong>Affected:</strong> PyPI: chromadb</p> <p>A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in the /api/v2/tenants/{tenant}/databases/{db}/collections endpoint.</p> https://cve.radiocsirt.org/vuln/pysec-2026-311