PatchTheCVECVEs published by HiddenLayer
CVEs published by HiddenLayer (CVE Numbering Authority). 13 tracked.
- CVE-2026-45829 CRITICAL 10.0 A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project al
- CVE-2026-45830 HIGH 8.8 UPGRADE A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authen
- CVE-2026-45833 HIGH 8.8 UPGRADE A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticat
- CVE-2026-45832 HIGH 8.8 UPGRADE All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the au
- CVE-2026-8828 HIGH 8.8 A lack of authorization validation in version 1.0.0 or later of the ChromaDB Rust project allows any authentic
- CVE-2026-45831 HIGH 8.8 UPGRADE The SimpleRBACAuthorizationProvider authorization provider in versions 0.5.0 or later of the ChromaDB Python p
- CVE-2026-87985 CRITICAL 10.0 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission chec
- CVE-2026-87986 CRITICAL 10.0 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission chec
- CVE-2026-87987 CRITICAL 10.0 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission chec
- CVE-2026-87983 CRITICAL 9.2 An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypas
- CVE-2026-87988 CRITICAL 10.0 An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions thr
- CVE-2026-87984 CRITICAL 9.3 An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to crea
- CVE-2026-79721 HIGH 8.6 Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a malicio