Everything Patch Review has reported about Apache Software Foundation: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical flaw in older CouchDB versions lets admins run shell commands. Version 3.5.3 fixes the issue. Update servers immediately to secure your infrastructure.
A missing authorization check in older CouchDB versions allows unauthorized access to system databases. Users should update to version 3.5.3 immediately.
Attackers can execute arbitrary code in Apache Camel via dynamic router controls if specific message headers are accepted without validation.