{"action":"Upgrade couchbase to 3.2.6 or later.","affected":[{"fixed":"3.2.6","introduced":"0"}],"component":"couchbase","cve_ids":["CVE-2025-52490"],"ecosystem":"PyPI","epss":0.00216,"exploited":false,"fixed_versions":["3.2.6"],"ghsa_id":"GHSA-pqhp-4xfc-hjgq","id":"tcs_01M5KGNK5TEKDY4528KC498JGA","modified_at":"2026-06-25T23:11:26.742449174Z","published_at":"2025-07-29T20:15:27.870Z","references":["https://osv.dev/vulnerability/PYSEC-2025-101","https://docs.couchbase.com/server/current/release-notes/relnotes.html","https://forums.couchbase.com/tags/security","https://www.couchbase.com/alerts/"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"PYSEC-2025-101","url":"https://osv.dev/vulnerability/PYSEC-2025-101"}],"summary":"An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output."}