PT-2026-132420

Published

2026-10-29

·

Updated

2026-10-29

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via creating an infinite HTTP redirect loop.
Users are recommended to upgrade to version 3.5.3, which fixes this issue.
Vendors
Affected products
Related identifiers
BIT-COUCHDB-2026-90798
Found an issue in the description? Have something to add? Feel free to write us 👾