chromadb

v1.5.9PyPI· Python

Chroma.

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the PyPI registry · derived rules, not AI

How it scores

MaintenanceHealthy

PopularityWidely used

Security1 advisory

LicenseUnknown

DepsHeavy

Maintenance

Last published 1 month ago.

Popularity

3.2M downloads / week

Security

1 known advisory (worst: high severity).

License

No license declared.

Dependencies

31 direct dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
ChromaDB Python project has a pre-authentication code injection vulnerability
GHSA-f4j7-r4q5-qw2c Published 2026-05-18

Recent releases