KurrentDB vulnerabilities

CVEs whose affected-version data names the KurrentDB package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-81190Medium· 6.9

2d ago

KurrentDB: Privileged access to read $all enables arbitrary file read and GET-only SSRF

KurrentDB is a database engineered for modern software applications and event-driven architectures. In version 26.1.0, a user authorized to read the $all stream can use Secondary Indexing query capabilities to read arbitrary files access…

▾ Sunlitkurrent-io · KurrentDBEPSS 0.27%via CVEORG