Vulnerabilities
Upgrade Apache CouchDB to 3.5.3 to Fix High-Severity Authorization Bypass Flaw
A missing authorization check in older CouchDB versions allows unauthorized access to system databases. Users should update to version 3.5.3 immediately.
authorization bypass
Everything Patch Review has reported about authorization bypass: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update Tandoor Recipes to 2.6.12 to Fix High-Severity Access Flaw
A vulnerability in Tandoor Recipes allows same-space users to view and edit private recipe steps, fixed in version 2.6.12.