AC
Product
Apache CouchDB
by Apache Software Foundation · last CVE Oct 20, 2026
On CISA KEVExploited in the wild
8
CVEs
1
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 2High 3Medium 1Low 2
Watch

Add Apache CouchDB to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-90799
1.3
1%
Oct 20
Apache CouchDB: Atom-table exhaustion in _changes sequences and _search bookmarks with specially crafted sequence values
Affected: before 3.5.3
CVE-2026-90798
0.6
1%
Oct 20
Apache CouchDB: Replicator follows redirects indefinitely
Affected: before 3.5.3
Showing 2