CVE-2022-39199

The CVE-2022-39199 issue affects immudb where client SDKs do not validate the server UUID, allowing a malicious server to report a UUID that makes the client treat the server as a different instance and retain an unrelated state. This is described across multiple sources in the connected document...

CVE-2022-36111

CVE-2022-36111 affects immudb client SDKs, not the server. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that the client accepts, signing a falsified transaction and replacing the genuine one. The attacker must prompt the client to perform a specific sequence...

CVE-2024-41262

mmudb v1.9.3 is vulnerable due to using HTTP in the ShowMetricsRaw and ShowMetricsAsText functions, which could enable a man‑in‑the‑middle (MitM) interception of communications between client and server. The issue is documented across multiple sources (Red Hat, NVD, OSV, CVE listings) and is spec...