HIGH7.3

PYSEC-2025-101

Quick fix

PYSEC-2025-101 — couchbase: upgrade to the fixed version with the command below.

pip install --upgrade 'couchbase>=3.2.6'

Details

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/couchbase

Introduced in: 0Fixed in: 3.2.6

Fixpip install --upgrade 'couchbase>=3.2.6'

References

https://docs.couchbase.com/server/current/release-notes/relnotes.html[ADVISORY]
https://forums.couchbase.com/tags/security[ADVISORY]
https://www.couchbase.com/alerts/[ADVISORY]