<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: apache-software-foundation-apache-couchdb</title><description>Every new CVE for apache-software-foundation-apache-couchdb.</description><link>https://agentprime.io/</link><item><title>CVE-2026-107755: Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs</title><link>https://agentprime.io/advisories/CVE-2026-107755/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107755/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:41:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90800: Apache CouchDB: Auth bypass in prefixed _users and _replicator databases</title><link>https://agentprime.io/advisories/CVE-2026-90800/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90800/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:40:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90799: Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values</title><link>https://agentprime.io/advisories/CVE-2026-90799/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90799/</guid><description>CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:40:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90798: Apache CouchDB: Replicator follows redirects indefinitely</title><link>https://agentprime.io/advisories/CVE-2026-90798/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90798/</guid><description>CVSS 0.6 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:39:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90797: Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session</title><link>https://agentprime.io/advisories/CVE-2026-90797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90797/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:39:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86471: Apache CouchDB: Admin credentials leading to code execution as operating system user</title><link>https://agentprime.io/advisories/CVE-2026-86471/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86471/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 15:38:09 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-45725: Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents</title><link>https://agentprime.io/advisories/CVE-2023-45725/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-45725/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Dec 2023 08:02:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-26268: Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes</title><link>https://agentprime.io/advisories/CVE-2023-26268/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-26268/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 May 2023 20:06:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-24706: Remote Code Execution Vulnerability in Packaging</title><link>https://agentprime.io/advisories/CVE-2022-24706/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-24706/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 25 Aug 2022: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.93 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 Apr 2022 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2021-38295: Privilege escalation vulnerability when using HTML attachments</title><link>https://agentprime.io/advisories/CVE-2021-38295/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-38295/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 14 Oct 2021 19:55:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-17188: Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database.</title><link>https://agentprime.io/advisories/CVE-2018-17188/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-17188/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 02 Jan 2019 14:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-11769: CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S).</title><link>https://agentprime.io/advisories/CVE-2018-11769/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-11769/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 08 Aug 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2018-8007: Apache CouchDB administrative users can configure the database server via HTTP(S).</title><link>https://agentprime.io/advisories/CVE-2018-8007/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2018-8007/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Jul 2018 13:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2016-8742: Apache Software Foundation Apache CouchDB: The Windows installer that the Apache CouchDB team provides was vulnerable to local…</title><link>https://agentprime.io/advisories/CVE-2016-8742/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2016-8742/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Feb 2018 17:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12636: CouchDB administrative users can configure the database server via HTTP(S).</title><link>https://agentprime.io/advisories/CVE-2017-12636/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12636/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2017 20:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-12635: Apache Software Foundation Apache CouchDB: Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser…</title><link>https://agentprime.io/advisories/CVE-2017-12635/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-12635/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 14 Nov 2017 20:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>