1claw-crewai-tools (>=0.1.0, <=0.3.4), 4dpocket (>=0.1.3, <=0.1.4) +2169 more potentially affected by CVE-2026-45830 via chromadb (>=0.4.17, <=1.5.9)

chromadb PYPI version =0.4.17, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.1.1, =0.0.4.dev0, =0.0.4 - adaline-crewai 0.1.0 - adam-thinking 1.0.0 and more Source cves: CVE-2026-45830 Source advisory: OSV:PYSEC-2026-3813...

1claw-crewai-tools (>=0.1.0, <=0.3.4), 4dpocket (>=0.1.3, <=0.1.4) +2169 more potentially affected by CVE-2026-45830 via chromadb (>=0.4.17, <=1.5.9)

chromadb PYPI version =0.4.17, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.2.0, =0.6.4, =0.1.1, =0.0.4.dev0, =0.0.4 - adaline-crewai 0.1.0 - adam-thinking 1.0.0 and more Source cves: CVE-2026-45830 Source advisory: GHSA-2WM9-HF6C-P5CR...

CVE-2026-45830

creationtimestamp| type| source ---|---|--- 2026-06-12 17:58:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo4cvvqt7s2f...

CVE-2026-45830

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to...

CVE-2026-45830

A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection regardless of which tenant they belong to...