[{"data":1,"prerenderedAt":267},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-chromadb-4bcada2e":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":43,"summary":62,"kind":76,"entity":77,"evidence":132,"related":152},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-09-16T04:45:26.395Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-09-16T04:44:00.147Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":36,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":37,"parsedFileCount":38,"parseErrorCount":32,"unsupportedFileCount":39,"evaluatedVersionCount":40,"metadataResolvedCount":41,"metadataNotFoundCount":42,"osvEvaluatedVersionCount":40,"codeRadarRepositoryCount":30},43,42,1,23,4,26,40,37,36,0,4116,4105,11,{"componentParserSchemaVersion":44,"candidateBoundary":45,"resolvedVersionBoundary":46,"manifestRangesResolved":47,"latestVersionSubstitution":47,"containerTagsVulnerabilityChecked":47,"osvClaim":48,"depsDevLicenseSemantics":49,"providerSemantics":50,"generativeAiUsed":47,"scoreUsed":47,"treeEntryCeiling":51,"fileByteCeiling":52,"uniqueVersionCeiling":53,"observedFormats":54},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[55,56,57,58,59,60,61],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":63,"aiPackageCount":64,"resolvedComponentCount":65,"resolvedVersionCount":40,"providerExposureRepositoryCount":66,"licenseExpressionCount":67,"knownLicensePackageCount":68,"unknownLicensePackageCount":69,"advisoryCount":70,"matchedAdvisoryRepositoryCount":37,"topPackage":71},2457,50,7121,9,55,2423,34,795,{"id":72,"slug":73,"label":74,"repositoryCount":33,"repositoryShare":75},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",0.5348837209302325,"paket",{"id":78,"slug":79,"identity":80,"ecosystem":81,"name":82,"label":83,"category":84,"aiRelevant":85,"provider":86,"repositoryCount":32,"occurrenceCount":87,"directRepositoryCount":32,"versionCount":32,"licenseExpressions":88,"advisoryIds":90,"advisoryCount":34,"verifiedAttestation":47,"repositories":95,"versions":103},"package:pypi:chromadb","chromadb-4bcada2e","pypi:chromadb","pypi","chromadb","Chroma","vector-store",true,null,3,[89],"non-standard",[91,92,93,94],"GHSA-2wm9-hf6c-p5cr","GHSA-36p7-vc44-83pf","GHSA-f4j7-r4q5-qw2c","GHSA-xph7-9rjv-w5fr",[96],{"id":97,"slug":98,"name":99,"pathWithNamespace":100,"versions":101,"evidenceCount":87},"opencode:11300","opencode-11300","URBAN.KI UrbanShieldAI","vernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-urbanshieldai",[102],"1.0.12",[104],{"version":102,"repositoryCount":32,"occurrenceCount":87,"ageDays":105,"advisoryIds":106,"metadata":107},473,[91,92,93,94],{"state":108,"checkedAt":7,"publishedAt":109,"deprecated":47,"deprecatedReason":86,"licenses":110,"advisoryIds":111,"links":116,"relatedProjects":125,"attestations":130,"verifiedAttestation":47,"projectStatus":131},"resolved","2025-05-31T00:18:58Z",[89],[91,92,93,94,112,113,114,115],"PYSEC-2026-311","PYSEC-2026-3813","PYSEC-2026-3814","PYSEC-2026-3815",[117,120,123],{"label":118,"url":119},"HOMEPAGE","https:\u002F\u002Fgithub.com\u002Fchroma-core\u002Fchroma",{"label":121,"url":122},"ISSUE_TRACKER","https:\u002F\u002Fgithub.com\u002Fchroma-core\u002Fchroma\u002Fissues",{"label":124,"url":119},"SOURCE_REPO",[126,129],{"id":127,"relationType":121,"relationProvenance":128},"github.com\u002Fchroma-core\u002Fchroma","UNVERIFIED_METADATA",{"id":127,"relationType":124,"relationProvenance":128},[],"active",{"occurrences":133,"occurrenceCount":87},[134,142,147],{"id":135,"repositoryId":97,"repositorySlug":98,"repositoryName":99,"repositoryPathWithNamespace":100,"ecosystem":81,"name":82,"identity":80,"version":102,"versionKey":136,"direct":85,"development":47,"sourceKind":137,"filePath":138,"blobSha":139,"sourceUrl":140,"commitSha":141},"component:f53e2910be11a68be7482a3b","pypi:chromadb@1.0.12","exact-manifest-pin","asrp_dir\u002Frequirements.txt","1123e44ab8a9a3f12dc3c2b1022686f0d7d178c8","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-urbanshieldai\u002F-\u002Fblob\u002Fa69008c9aa95148a933a3b7dc6c2f001bfb3b7b1\u002Fasrp_dir\u002Frequirements.txt","a69008c9aa95148a933a3b7dc6c2f001bfb3b7b1",{"id":143,"repositoryId":97,"repositorySlug":98,"repositoryName":99,"repositoryPathWithNamespace":100,"ecosystem":81,"name":82,"identity":80,"version":102,"versionKey":136,"direct":85,"development":47,"sourceKind":137,"filePath":144,"blobSha":145,"sourceUrl":146,"commitSha":141},"component:352aa75322893fbe9a61e4da","requirements-file\u002Frequirements-docker.txt","359fe79592e2869ec844c610b934f1c2e91d4842","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-urbanshieldai\u002F-\u002Fblob\u002Fa69008c9aa95148a933a3b7dc6c2f001bfb3b7b1\u002Frequirements-file\u002Frequirements-docker.txt",{"id":148,"repositoryId":97,"repositorySlug":98,"repositoryName":99,"repositoryPathWithNamespace":100,"ecosystem":81,"name":82,"identity":80,"version":102,"versionKey":136,"direct":85,"development":47,"sourceKind":137,"filePath":149,"blobSha":150,"sourceUrl":151,"commitSha":141},"component:34d222f1d36cde02627467db","requirements-file\u002Frequirements.txt","d8eeaa4ce4a4e67cd4ee8a59e6cc6430b725b4d3","https:\u002F\u002Fgitlab.opencode.de\u002Fvernetzte-stadt-gelsenkirchen\u002Furban.ki\u002Furban-ki-urbanshieldai\u002F-\u002Fblob\u002Fa69008c9aa95148a933a3b7dc6c2f001bfb3b7b1\u002Frequirements-file\u002Frequirements.txt",{"repositories":153,"vulnerabilities":156},[154],{"id":97,"slug":98,"name":99,"pathWithNamespace":100,"versions":155,"evidenceCount":87},[102],[157,196,222,245],{"id":91,"slug":158,"dossier":47,"summary":159,"aliases":160,"sourceIds":162,"published":163,"modified":164,"checkedAt":7,"severity":165,"references":172,"versionKeys":195,"packageCount":32,"repositoryCount":32},"ghsa-2wm9-hf6c-p5cr-4e2f7d91","ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection",[161,113],"CVE-2026-45830",[91,113],"2026-06-12T18:31:56Z","2026-09-10T12:25:31.394776670Z",[166,169],{"type":167,"score":168},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"type":170,"score":171},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:N\u002FSC:H\u002FSI:H\u002FSA:N",[173,176,179,181,183,185,187,189,191,193],{"type":174,"url":175},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45830",{"type":177,"url":178},"WEB","https:\u002F\u002Fgithub.com\u002Fchroma-core\u002Fchroma\u002Fissues\u002F7588",{"type":177,"url":180},"https:\u002F\u002Fgithub.com\u002Fchroma-core\u002Fchroma\u002Fpull\u002F7602",{"type":177,"url":182},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-45830",{"type":177,"url":184},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2488408",{"type":186,"url":119},"PACKAGE",{"type":177,"url":188},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-45830.json",{"type":177,"url":190},"https:\u002F\u002Fwww.hiddenlayer.com\u002Fsai-security-advisory\u002F2026-06-chromadb",{"type":186,"url":192},"https:\u002F\u002Fpypi.org\u002Fproject\u002Fchromadb",{"type":174,"url":194},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2wm9-hf6c-p5cr",[136],{"id":92,"slug":197,"dossier":47,"summary":198,"aliases":199,"sourceIds":201,"published":163,"modified":202,"checkedAt":7,"severity":203,"references":206,"versionKeys":221,"packageCount":32,"repositoryCount":32},"ghsa-36p7-vc44-83pf-c961d4d6","ChromaDB has a code injection vulnerability",[200,114],"CVE-2026-45833",[92,114],"2026-09-10T12:25:44.502926958Z",[204],{"type":170,"score":205},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H",[207,209,211,213,214,216,218,219],{"type":174,"url":208},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45833",{"type":177,"url":210},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-45833",{"type":177,"url":212},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2488430",{"type":186,"url":119},{"type":177,"url":215},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-45833.json",{"type":177,"url":217},"https:\u002F\u002Fwww.hiddenlayer.com\u002Fsai-security-advisory\u002F2026-06-chromadb-5",{"type":186,"url":192},{"type":174,"url":220},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-36p7-vc44-83pf",[136],{"id":93,"slug":223,"dossier":47,"summary":224,"aliases":225,"sourceIds":227,"published":228,"modified":229,"checkedAt":7,"severity":230,"references":233,"versionKeys":244,"packageCount":32,"repositoryCount":32},"ghsa-f4j7-r4q5-qw2c-1f0326e9","ChromaDB Python project has a pre-authentication code injection vulnerability",[226,112],"CVE-2026-45829",[93,112],"2026-05-18T18:31:30Z","2026-07-01T20:22:50.354214Z",[231],{"type":170,"score":232},"CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:H\u002FSI:H\u002FSA:H\u002FE:P",[234,236,238,239,241,242],{"type":174,"url":235},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45829",{"type":177,"url":237},"https:\u002F\u002Fgithub.com\u002Fchroma-core\u002Fchroma\u002Fissues\u002F6717",{"type":186,"url":119},{"type":177,"url":240},"https:\u002F\u002Fwww.hiddenlayer.com\u002Fresearch\u002Fchromatoast-served-pre-auth",{"type":186,"url":192},{"type":174,"url":243},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-f4j7-r4q5-qw2c",[136],{"id":94,"slug":246,"dossier":47,"summary":247,"aliases":248,"sourceIds":250,"published":163,"modified":251,"checkedAt":7,"severity":252,"references":255,"versionKeys":266,"packageCount":32,"repositoryCount":32},"ghsa-xph7-9rjv-w5fr-77473daf","ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to",[249,115],"CVE-2026-45831",[94,115],"2026-09-10T12:25:45.510140945Z",[253,254],{"type":167,"score":168},{"type":170,"score":171},[256,258,259,260,261,263,264],{"type":174,"url":257},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45831",{"type":177,"url":178},{"type":177,"url":180},{"type":186,"url":119},{"type":177,"url":262},"https:\u002F\u002Fwww.hiddenlayer.com\u002Fsai-security-advisory\u002F2026-06-chromadb-3",{"type":186,"url":192},{"type":174,"url":265},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-xph7-9rjv-w5fr",[136],1789534497849]