Apache Software Foundation Couchdb vulnerabilities

• apache software foundation couchdb Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs CVE-2026-107755 Fix available 6.0 MediumOctober 20, 2026
• apache software foundation couchdb Apache CouchDB: Auth bypass in prefixed _users and _replicator databases CVE-2026-90800 Fix available 8.1 HighOctober 20, 2026
• apache software foundation couchdb Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values CVE-2026-90799 Fix available 1.3 LowOctober 20, 2026
• apache software foundation couchdb Apache CouchDB: Replicator follows redirects indefinitely CVE-2026-90798 Fix available 0.6 LowOctober 20, 2026
• apache software foundation couchdb Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session CVE-2026-90797 Fix available 7.7 HighOctober 20, 2026
• apache software foundation couchdb Apache CouchDB: Admin credentials leading to code execution as operating system user CVE-2026-86471 Fix available 9.3 CriticalOctober 20, 2026
• apache couchdb, apache software foundation ibm cloudant +1 more Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents CVE-2023-45725 Fix available 5.7 MediumDecember 13, 2023
• apache couchdb, apache software foundation ibm cloudant, ibm cloudant +2 more Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes CVE-2023-26268 Fix available 4.4 MediumMay 2, 2023
• apache couchdb Remote Code Execution Vulnerability in Packaging CVE-2022-24706 In KEVPublic exploitFix available EPSS 92.5% 9.8 CriticalApril 26, 2022
• apache couchdb, apache software foundation ibm cloudant +1 more Privilege escalation vulnerability when using HTML attachments CVE-2021-38295 Public exploitFix available 7.3 HighOctober 14, 2021
• apache couchdb CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the... CVE-2020-1955 Fix available 9.8 CriticalMay 20, 2020
• apache couchdb Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of... CVE-2018-17188 7.2 HighJanuary 2, 2019
• apache couchdb CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S). Due to... CVE-2018-11769 Fix available 7.2 HighAugust 8, 2018
• apache couchdb Apache CouchDB administrative users can configure the database server via HTTP(S). Due to... CVE-2018-8007 Fix available EPSS 12.2% 7.2 HighJuly 11, 2018
• apache couchdb The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege... CVE-2016-8742 Public exploit 7.8 HighFebruary 12, 2018
• apache couchdb CouchDB administrative users can configure the database server via HTTP(S). Some of the... CVE-2017-12636 Public exploit EPSS 90.6% 7.2 HighNovember 14, 2017
• apache couchdb Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is... CVE-2017-12635 Public exploit EPSS 99.8% 9.8 CriticalNovember 14, 2017