{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"couchbase","cve_ids":["CVE-2023-45875"],"ecosystem":"PyPI","epss":0.00736,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGK1G3Z8JMVQNY2TRDN3K7","modified_at":"2025-10-09T08:26:33.400065Z","published_at":"2023-11-08T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-235","https://forums.couchbase.com/tags/security","https://docs.couchbase.com/server/current/release-notes/relnotes.html","https://www.couchbase.com/alerts/"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2023-235","url":"https://osv.dev/vulnerability/PYSEC-2023-235"}],"summary":"An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster."}