https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:39:56 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45830 <p><strong>Affected:</strong> ChromaDB, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)</p> <p>A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant&#39;s collection regardless of which tenant they belong to.</p> <p><strong>Affected:</strong> ChromaDB, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)</p> <p>A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant&#39;s collection regardless of which tenant they belong to.</p> https://cve.radiocsirt.org/vuln/cve-2026-45830 https://cve.radiocsirt.org/vuln/ghsa-2wm9-hf6c-p5cr <p><strong>Affected:</strong> PyPI: chromadb</p> <p>A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant&#39;s collection regardless of which tenant they belong to.</p> <p><strong>Affected:</strong> PyPI: chromadb</p> <p>A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant&#39;s collection regardless of which tenant they belong to.</p> https://cve.radiocsirt.org/vuln/ghsa-2wm9-hf6c-p5cr