{"schema_version": "1.6.1", "id": "CVE-2023-26268", "summary": "Information sharing via couchjs processes", "details": "Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document functions:\n  *  validate_doc_update\n\n  *  list\n\n  *  filter\n\n  *  filter views (using view functions as filters)\n\n  *  rewrite\n\n  *  update\n\nThis doesn't affect map/reduce or search (Dreyfus) index functions.\n\nUsers are recommended to upgrade to a version that is no longer affected by this issue (Apache CouchDB 3.3.2 or 3.2.3).\n\nWorkaround: Avoid using design documents from untrusted sources which may attempt to cache or store data in the Javascript environment.\n\n", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}, {"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/r2wvjfysg3d92lhhjd1qh3wfr8mlp0pp"}, {"type": "WEB", "url": "https://docs.couchdb.org/en/stable/cve/2023-26268.html"}, {"type": "WEB", "url": "https://lists.apache.org/thread/ldkqs0nhpmho26bdxf4fon7w75hsq5gl"}]}