Apache Software Foundation Apache CouchDB

• CVE-2022-24706 Critical 9.8 Exploited Remote Code Execution Vulnerability in Packaging 92.5%
• CVE-2026-107755 Medium 6.0 Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs 0.6%
• CVE-2026-90800 High 8.1 Apache CouchDB: Auth bypass in prefixed _users and _replicator databases 0.6%
• CVE-2026-90799 Low 1.3 Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values 0.6%
• CVE-2026-90798 Low 0.6 Apache CouchDB: Replicator follows redirects indefinitely 0.6%
• CVE-2026-90797 High 7.7 Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session 0.7%
• CVE-2026-86471 Critical 9.3 Apache CouchDB: Admin credentials leading to code execution as operating system user 0.6%
• CVE-2023-45725 Unrated Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents 1.2%
• CVE-2023-26268 Medium 4.4 Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes 1.4%
• CVE-2021-38295 Unrated Privilege escalation vulnerability when using HTML attachments 2.7%