← All credits

Esteban Tonglet

4 vulnerability records and advisories credit this contributor.

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in

Exposure of sensitive Information allows account takeover

Improper access control allows arbitrary account creation

Missing Authorization for Interactive Sessions