chroma-core chroma
2 known vulnerabilities in chroma-core chroma, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-92782 CVSS 8.6 high Chroma through 1.5.9 fails to validate tenant and database segments when resolving collections, allowing authenticated attackers to access…
- CVE-2026-85664 CVSS 8.7 high Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_search in collection-create…