Crate vulnerabilities

Products

• Crate 3

Newest

• crate CrateDB's Blob HTTP handler bypasses authorization CVE-2026-49989 Fix available 7.1 HighJuly 1, 2026
• crate, cratedb +1 more Client initialized Session-Renegotiation DoS CVE-2024-37309 Fix available 5.3 MediumJune 13, 2024
• crate, cratedb +1 more CrateDB database has an arbitrary file read vulnerability CVE-2024-24565 Fix available 5.7 MediumJanuary 30, 2024