In Apache CouchDB versions prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges.
adaa831a27cc8a7dbc13e63bb293d887542dcd7e9b4a0d6eb85acf4fc9076b08
Apache CouchDB version 3.2.1 suffers from a remote code execution vulnerability.
f1687dd02add8cf6fd95b916d13ebd9d1a2a3752722f49c27c7755203c138d46