chromadb
Chroma.
v1.5.9Apache Software License
AI Health Summary — Claude-generated analysis of download trends, maintenance, and risk signals.
Upgrade to PROHIGH
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
CVE-2026-45830 · PYSEC-2026-3813
CRITICAL
ChromaDB has a code injection vulnerability
CVE-2026-45833 · PYSEC-2026-3814
CRITICAL
ChromaDB Python project has a pre-authentication code injection vulnerability
CVE-2026-45829 · PYSEC-2026-311
HIGH
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
CVE-2026-45831 · PYSEC-2026-3815
UNKNOWN
ChromaDB Python project has a pre-authentication code injection vulnerability
CVE-2026-45829 · GHSA-f4j7-r4q5-qw2c
UNKNOWN
ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection
CVE-2026-45830 · GHSA-2wm9-hf6c-p5cr
UNKNOWN
ChromaDB has a code injection vulnerability
CVE-2026-45833 · GHSA-36p7-vc44-83pf
UNKNOWN
ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to
CVE-2026-45831 · GHSA-xph7-9rjv-w5fr
Based on latest version 1.5.9. If you're running an older version, check OSV for your specific version.
Exclude CI/CDPRO
Best Day
316.9K
Oct 13
Worst Day
135.3K
Sep 20
Peaks On
Mons
300.7K avg
Quietest
Sats
172.4K avg
Download Trend
Badge
Markdown
[](/packages/chromadb)
HTML
<a href="/packages/chromadb"><img src="/api/badges/chromadb?period=month" alt="PyPI Stats"></a>