Chroma

Reported Context (2)

The cybersecurity firm says it has attempted to report the issue to Chroma multiple times via several channels starting February 17, but has received no response. Unpatched ChromaDB Flaw Could Enable Pre-Authentication Server Takeover
and maitai of Doyensec hacking OpenAI’s Codex coding agent (each earning $40,000), haehae dropping a Chroma zero-day ($20,000), and STARLabs SG a LM Studio zero-day ($40,000). Pwn2Own Berlin Day One Features Windows 11 and Edge Exploits

CVE (1)

People (11)

MITRE ATT&CK (1)

Vendors (6)

Products (10)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.