Vulnerability GHSA-px2c-r924-mwcc
Medium Risk
MEDIUM RISK
CVSS Score: 4.9
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
June 18, 2025 at 03:31 PM UTC
Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates
0.9.0 - 3.7.0
0.9.0 - 3.7.0
Summary
Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates
Details
The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default.
Impacted packages
Timeline
Published
1 year ago
June 18, 2025 at 03:31 PM UTC
Fixed (3.7.1)
1 year ago
May 07, 2025 at 05:07 PM UTC
Last Modified
2 hours ago
October 19, 2026 at 09:00 PM UTC