812 matches found
Malicious code in @mastra/couchbase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693f6ba494800c38ce77ad49fa5d74745125fc4d3bb68c047ea96032580b7a93 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-6012 Malicious code in @mastra/couchbase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693f6ba494800c38ce77ad49fa5d74745125fc4d3bb68c047ea96032580b7a93 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
com.ibeetl:xlsunit (>=1.0.0, <=1.0.4), com.kurento.kmf:kmf-content-api (>=3.0.5, <=4.3.1) +26 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.8.1.release)
org.springframework.data:spring-data-commons MAVEN version 1.8.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ibeetl:xlsunit =1.0.0, =3.0.5, =1.0.4, =5.0.3, =5.0.4 -...
com.ifrabbit:spring-boot-starter-data-mybatis (1.0.17.release), com.ifrabbit:spring-data-mybatis (1.0.17.release) +28 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.13.5.release)
org.springframework.data:spring-data-commons MAVEN version 1.13.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - com.ifrabbit:spring-boot-starter-data-mybatis 1.0.17.release -...
org.springframework.data:spring-cql (1.5.2.release), org.springframework.data:spring-data-cassandra (1.5.2.release) +14 more potentially affected by CVE-2026-41711 via org.springframework.data:spring-data-commons (1.13.2.release)
org.springframework.data:spring-data-commons MAVEN version 1.13.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.5.2.release -...
org.springframework.data:spring-cql (1.4.9.release), org.springframework.data:spring-data-cassandra (1.4.9.release) +13 more potentially affected by CVE-2026-41716 via org.springframework.data:spring-data-commons (1.12.9.release)
org.springframework.data:spring-data-commons MAVEN version 1.12.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.4.9.release -...
@colmena/colmena-loopback (>=0.0.4, <=0.2.1), loopback-component-meta (1.0.0) +2 more potentially affected by unknown CVE via loopback (>=2.8.6, <=2.36.2)
loopback NPM version =2.8.6, =0.0.4, =0.2.1 - loopback-component-meta 1.0.0 - loopback-connector-couchbase 1.0.6 - loopback-connector-couchbase-mappingport 1.0.1 Source cves: unknown CVE Source advisory: MEND:WS-2019-0247...
org.springframework.ai:spring-ai-starter-vector-store-couchbase (>=1.0.0-m7, <=1.0.5) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-couchbase-store (>=1.0.0-m7, <=1.0.5)
org.springframework.ai:spring-ai-couchbase-store MAVEN version =1.0.0-m7, =1.0.0-m7, =1.0.5 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16316423...
org.springframework.ai:spring-ai-starter-vector-store-couchbase (>=1.1.0-m1, <=1.1.4) potentially affected by CVE-2026-40967 via org.springframework.ai:spring-ai-couchbase-store (>=1.1.0-m1, <=1.1.4)
org.springframework.ai:spring-ai-couchbase-store MAVEN version =1.1.0-m1, =1.1.0-m1, =1.1.4 Source cves: CVE-2026-40967 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAI-16316423...
Improper Neutralization of Special Elements in Data Query Logic
Overview org.springframework.ai:spring-ai-couchbase-store is a Spring AI Couchbase Vector Store Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via the FilterExpressionConverter implementations. An attacker can alter underlying...
CVE-2021-27924
An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires...
casbin-couchbase-adapter (>=0.1.3, <=0.1.4), fastapi-authz (0.0.3) +1 more potentially affected by CVE-2026-32640 via simpleeval (0.9.10)
simpleeval PYPI version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on simpleeval and may be impacted: - casbin-couchbase-adapter =0.1.3, =2.0.0, =2.4.0 Source cves: CVE-2026-32640 Source advisory: OSV:PYSEC-2026-132...
casbin-couchbase-adapter (>=0.1.3, <=0.1.4), fastapi-authz (0.0.3) +1 more potentially affected by CVE-2026-32640 via simpleeval (0.9.10)
simpleeval PYPI version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on simpleeval and may be impacted: - casbin-couchbase-adapter =0.1.3, =2.0.0, =2.4.0 Source cves: CVE-2026-32640 Source advisory: OSV:GHSA-44VG-5WV2-H2HG...
CVE-2023-25016
Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor...
CVE-2023-43768
An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause memcached to run out of memory via large commands...
CVE-2023-50436
An issue was discovered in Couchbase Server before 7.2.4. nsserver admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5...
CVE-2023-50437
An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2...
CVE-2023-49931
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted...