Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache CouchDB

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-107755

    Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs

    Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of other users’ replications, not just their own. Users are recommended to upgrad…

    Apache Software Foundation Apache CouchDB couchdb Ubuntu
  • Medium 4.4
    CVE-2023-26268

    Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes

    Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document functions: * validate_doc_update * list * filter * filter views (using view functions as filters) * re…

    Apache Software Foundation Apache CouchDB IBM Cloudant couchdb Ubuntu