Crate vulnerabilities
We track 1 vulnerability in Crate products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 14, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Crate vulnerabilities
- 7.1 High severity
crate: Incorrect Authorization
CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of `GRANT`s. CrateDB has two ways