Chroma DB - Information Disclosure Detection

Chroma DB API endpoints were accessible and exposed collection metadata, enabling enumeration of collections under the default tenant and database, potentially leading to sensitive vector data disclosure. !/usr/bin/env python3 -- coding: utf-8 -- """Chroma DB API endpoints were accessible and...

PT-2026-39749

Name of the Vulnerable Software and Affected Versions Audiobookshelf versions prior to 2.32.2 Description An authenticated user with access to any library can enumerate and read collections, including full book metadata, from libraries they are explicitly restricted from accessing. This occurs...

CVE-2026-42884: Incorrect Authorization

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the GET /api/collections and GET /api/collections/:id endpoints return collections from all libraries without checking whether the requesting user has access to each collection's library. An authenticated user with...

CVE-2026-33420 Vaultwarden missing authorization check allows Manager-role users to enumerate all collections

Vaultwarden is a Bitwarden-compatible server written in Rust. In version 1.35.4 and earlier, the getorgcollectionsdetails endpoint GET /api/organizations/orgid/collections/details is missing the hasfullaccess authorization check that exists on the sibling getorgcollections endpoint. This allows a...

Information Disclosure

Directus is vulnerable to information disclosure. The vulnerability is due to different error messages returned by the /items/collection API when accessing unauthorized existing collections versus non-existent collections, which allows an attacker to enumerate and discover the existence of...