Skip to content
OpenAdvisories

Package · Go

github.com/couchbase/sync_gateway

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.3
    CVE-2025-52490

    Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

    An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

    couchbase github.com/couchbase/sync_gateway PyPI Go
  • Critical 9.8
    CVE-2019-9039

    SQL Injection in Couchbase Sync Gateway

    In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements and extract sensitive data or call arbitrary N1QL functions through the parameters "startkey" and "endkey" on the "_all…

    github.com/couchbase/sync_gateway Go