{"action":"Upgrade CouchbaseNetClient to 3.7.1 or later.","affected":[{"fixed":"3.7.1","introduced":"0"}],"component":"CouchbaseNetClient","cve_ids":["CVE-2025-49015"],"ecosystem":"NuGet","epss":0.0023,"exploited":false,"fixed_versions":["3.7.1"],"ghsa_id":"GHSA-px2c-r924-mwcc","id":"tcs_01M5N8XASK63QTN1VSPKJD3GK0","modified_at":"2026-10-19T21:00:05.206656943Z","published_at":"2025-06-18T15:31:15Z","references":["https://osv.dev/vulnerability/GHSA-px2c-r924-mwcc","https://nvd.nist.gov/vuln/detail/CVE-2025-49015","https://github.com/couchbase/couchbase-net-client/commit/04d1679b2178f922036be6e595b3d91f972c5ba3","https://docs.couchbase.com/server/current/release-notes/relnotes.html","https://forums.couchbase.com/tags/security","https://github.com/couchbase/couchbase-net-client","https://www.couchbase.com/alerts"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-px2c-r924-mwcc","url":"https://osv.dev/vulnerability/GHSA-px2c-r924-mwcc"}],"summary":"Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates"}