Threats tagged 'bit-couchdb-2026-90799'

Apache CouchDB versions 3.5.2 and earlier contain an unsafe binary deserialization vulnerability in the chttpd component. This flaw allows an authenticated user to cause a denial of service through memory exhaustion by exploiting atom-table exhaustion in _changes sequences and _search bookmarks. The issue is fixed in version 3.5.3.