Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache CouchDB

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 1.3
    CVE-2026-90799

    Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values

    Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory exhaustion. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

    Apache Software Foundation Apache CouchDB couchdb Ubuntu
  • Low 0.6
    CVE-2026-90798

    Apache CouchDB: Replicator follows redirects indefinitely

    A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop. Users are recommended to upgrade to ver…

    Apache Software Foundation Apache CouchDB couchdb Ubuntu