couchbase net sdk vulnerabilities

Latest couchbase net sdk CVEs

Newest publication first

1. CVE-2025-49015 Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates

   Published 2025-06-18

   Medium·CVSS 4.9 EPSS 0.24%

   The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.