NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#chttpd

0 stories this week · 3 this month · 3 in 6 months · mostly security

Stories per day · 30 days

Relatedapache2 couchdb2 denial-of-service2 apache-couchdb1 auth-bypass1 gzip1 pre-auth1

2 stories, newest first · one card per story

oss-security22d agohigh

CouchDB before 3.5.3 allows unauthenticated reads of prefixed system DBs

Missing checks in chttpd expose the full contents of prefixed _users or _replicator databases.

4 sources apache couchdb

1

oss-security22d agohigh

CouchDB before 3.5.3 allows pre-auth gzip DoS (CVE-2026-90797)

Any remote client can exhaust memory through unlimited gzip decompression on POST /_session; 3.5.3 fixes it.

2 sources apache-couchdb denial-of-service

2