The current version of Apache CouchDB is 3.5.2 (as of 08/07/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists this vulnerability in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
- CVE-2022-24706Apache CouchDB Insecure Default Initialization of Resource Vulnerability
9.8 critical · over the network, without login · CISA deadline was 15 Sept 22
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
Apache CouchDB at a glance
Apache CouchDB is a widely used open-source document database with a HTTP/JSON API and multi-master replication, common in offline-first and distributed applications. CouchDB ships regular releases plus coordinated security fixes; as a database with an HTTP interface, hardening and timely updates matter.
For admins the cardinal rule is exposure: CouchDB speaks HTTP and has been leaked through open, unauthenticated instances — never expose it to the internet without authentication and TLS, and bind it appropriately. It has had security advisories (including privilege-escalation classes), so apply security releases promptly. Updates within a line are usually routine; in a cluster, roll nodes carefully and back up first. Check replication and application compatibility across versions. After updating, verify that the API, databases and replication work. Its replication is powerful but means misconfiguration can propagate widely. Track the version and its support window; patchletter surfaces new CouchDB releases.
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 3.5.2 | STABLE | 08/07/2026 | – |
Frequently asked questions
- What is the latest version of Apache CouchDB?
- Apache CouchDB 3.5.2, released 08/07/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Apache CouchDB release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Apache CouchDB updates?
- Tick Apache CouchDB off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new Apache CouchDB version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current Apache CouchDB version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/couchdb)https://patchletter.com/badge/couchdb.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
