CouchDB

Search everything

Mentions · 7d0
Mentions · 30d2
All mentions2
First seenOct 20, 2026
Last mentioned22d ago

Timeline

2 articles · newest first

CouchDB before 3.5.3 allows pre-auth gzip DoS (CVE-2026-90797)

Any remote client can exhaust memory through unlimited gzip decompression on POST /_session; 3.5.3 fixes it.

oss-securityOct 20, 16:48 UTC · 22d agoVulnerability 2 sourcesCVE-2026-907972

CouchDB before 3.5.3 lets admins run shell commands (CVE-2026-86471)

A CouchDB server admin can execute arbitrary shell commands as the CouchDB OS user; upgrade to 3.5.3.

oss-securityOct 20, 16:45 UTC · 22d agoVulnerabilityExploited2 sourcesCVE-2026-864711 · 1 read

Related CVEs

by mentions

CVE-2026-864719.3
OS command injection in Apache CouchDB admin config
published 22d agoApache CouchDB
CVE-2026-907977.7
Unauthenticated gzip decompression DoS in Apache CouchDB
published 22d agoApache CouchDB

Appears with

Apachevendor · 2

Entities are extracted by the model from each article. First seen Oct 20, 2026, last mentioned 22d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.