PT-2024-21292

Name of the Vulnerable Software and Affected Versions EventStoreDB versions 20 prior to 20.10.6 EventStoreDB versions 21 prior to 21.10.11 EventStoreDB versions 22 prior to 22.10.5 EventStoreDB versions 23 prior to 23.10.1 Description A vulnerability has been identified in the projections subsyst...

CVE-2024-26133: Plaintext Storage of a Password

EventStoreDB ESDB is an operational database built to store events. A vulnerability has been identified in the projections subsystem in versions 20 prior to 20.10.6, 21 prior to 21.10.11, 22 prior to 22.10.5, and 23 prior to 23.10.1. Only database instances that use custom projections are affecte...