Issues · chroma-core/chroma · GitHub

Labels Milestones New issue

[Bug]: hnswlib Uncontrolled Memory Allocation via `size_data_per_element_` Integer Overflow

#7011

· raefko opened

on May 1, 2026

[Bug]: usearch Out-of-Bounds Read via Malicious Index File

#7002

· raefko opened

on May 1, 2026

chromadb_rust_bindings SIGSEGV on macOS ARM64 (Python 3.14)

#6984

· hughie-coles opened

on Apr 26, 2026

[Bug]: SIGSEGV in chromadb_rust_bindings HNSW walk (1.5.8) — deterministic under caller blocking-syscall timing

#6979

· sha2fiddy opened

on Apr 26, 2026

PersistentLocalHnswSegment loses in-memory state on process exit when sync_threshold not crossed

#6975

· emicarlu opened

on Apr 25, 2026

[Bug]: npm package @chroma-core/ollama depends on unused "testcontainers"

#6972

· AviVahl opened

on Apr 24, 2026

[Bug]: SIGSEGV (exit 139) in chromadb.api.rust on Linux kernel 6.17

#6963

· Rom1-B opened

on Apr 23, 2026

HNSW Rust loader segfaults (exit 139) when index_metadata.pickle contains dimensionality=None instead of raising Python exception

#6949

· sunilfernandes opened

on Apr 22, 2026

DefaultEmbeddingFunction.call constructs a new ONNXMiniLM_L6_V2 on every call (10× slowdown on repeated embeds)

#6941

· xelauvas opened

on Apr 21, 2026

[Feature] Built-in collection versioning for zero-downtime index updates

#6930

· reallyticsai opened

on Apr 18, 2026

[Security] Unsafe pickle.load() in PersistentLocalHnswSegment enables arbitrary code execution (CWE-502)

#6926

· patchmyday opened

on Apr 17, 2026

[Feature Request]: Enable parallel processing for SentenceTransformerEmbeddingFunction

#6903

· Ashish-Abraham opened

on Apr 14, 2026