{"package":"CouchbaseNetClient","ecosystem":"nuget","latest_version":"3.9.1","description":"The Official Couchbase .NET SDK.","license":"Apache-2.0","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"https://github.com/couchbase/couchbase-net-client","repository":"https://github.com/couchbase/couchbase-net-client","downloads_weekly":111274,"health":{"score":83,"risk":"low","breakdown":{"maintenance":25,"popularity":14,"security":23,"maturity":15,"community":6},"deprecated":false,"max_score":100},"vulnerabilities":{"count":1,"critical":0,"high":0,"medium":1,"low":0,"details":[{"vuln_id":"CVE-2025-49015","severity":"medium","summary":"Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates","affected_versions":"=0.9.0|=0.9.1|=0.9.2|=1.0.0|=1.0.1|=1.1.0|=1.1.0.1|=1.1.1|=1.1.2|=1.1.3|=1.1.4|=1.1.5|=1.1.6|=1.2.0|=1.2.0-beta|=1.2.0-beta-2|=1.2.0-beta-3|=1.2.1|=1.2.2|=1.2.2.1|=1.2.3|=1.2.4|=1.2.5|=1.2.6|=1.2.7|=1.2.8|=1.2.9|=1.3.0|=1.3.1|=1.3.10|=1.3.11|=1.3.12|=1.3.13|=1.3.2|=1.3.3|=1.3.4|=1.3.5|=1.3.6|=1.3.7|=1.3.8|=1.3.9|=2.0.0|=2.0.0-beta|=2.0.0-beta2|=2.0.0.1|=2.0.1|=2.0.2|=2.0.3|=2.0.3.1|=2.0.3.2|=2.1.0|=2.1.1|=2.1.2|=2.1.3|=2.1.4|=2.2.0|=2.2.0-dp1|=2.2.1|=2.2.2|=2.2.4|=2.2.5|=2.2.6|=2.2.7|=2.2.8|=2.3.0|=2.3.1|=2.3.10|=2.3.11|=2.3.3|=2.3.4|=2.3.5|=2.3.6|=2.3.7|=2.3.8|=2.3.9|=2.4.0|=2.4.0-dp1|=2.4.0-dp2|=2.4.0-dp3|=2.4.1|=2.4.2|=2.4.3|=2.4.4|=2.4.5|=2.4.6|=2.4.7|=2.4.8|=2.5.0|=2.5.1|=2.5.10|=2.5.11|=2.5.12|=2.5.2|=2.5.3|=2.5.4|=2.5.5|=2.5.6|=2.5.7|=2.5.8|=2.5.9|=2.6.0|=2.6.0-beta|=2.6.0-dp1|=2.6.1|=2.6.2|=2.7.0|=2.7.1|=2.7.10|=2.7.11|=2.7.12|=2.7.13|=2.7.14|=2.7.15|=2.7.16|=2.7.17|=2.7.18|=2.7.19|=2.7.2|=2.7.20|=2.7.21|=2.7.22|=2.7.23|=2.7.24|=2.7.25|=2.7.26|=2.7.27|=2.7.3|=2.7.4|=2.7.5|=2.7.6|=2.7.7|=2.7.8|=2.7.9|=3.0.0|=3.0.0-alpha1|=3.0.0-alpha2|=3.0.0-alpha3|=3.0.0-alpha4|=3.0.0-alpha5|=3.0.0-beta1|=3.0.0-beta2|=3.0.0-beta3|=3.0.0-beta4|=3.0.1|=3.0.2|=3.0.3|=3.0.4|=3.0.5|=3.0.6|=3.0.7|=3.1.0|=3.1.1|=3.1.2|=3.1.3|=3.1.4|=3.1.5|=3.1.5-donotuse-202105042202|=3.1.5-donotuse-20210504335|=3.1.5-local-202105032202|=3.1.6|=3.1.7|=3.2.0|=3.2.1|=3.2.2|=3.2.3|=3.2.4|=3.2.5|=3.2.6|=3.2.7|=3.2.8|=3.2.9|=3.3.0|=3.3.1|=3.3.2|=3.3.3|=3.3.4|=3.3.5|=3.3.6|=3.4.0|=3.4.1|=3.4.10|=3.4.11|=3.4.12|=3.4.13|=3.4.14|=3.4.14-rc3|=3.4.15|=3.4.2|=3.4.3|=3.4.4|=3.4.5|=3.4.6|=3.4.7|=3.4.8|=3.4.9|=3.5.0|=3.5.1|=3.5.1-rc5|=3.5.2|=3.5.3|=3.5.5|=3.6.0|=3.6.1|=3.6.2|=3.6.3|=3.6.4|=3.6.5|=3.6.5-buildbot-r8718|=3.6.6|=3.7.0|=3.7.1|=3.7.2","fixed_version":null,"source":"osv","published_at":"2025-06-18T15:31:15Z","in_kev":false,"epss_prob":0.00163,"epss_percentile":0.36929,"threat_tier":"theoretical"}],"actively_exploited_count":0,"likely_exploited_count":0},"versions":{"latest":"3.9.1","total_count":217,"recent":["3.5.1","3.5.2","3.5.3","3.5.5","3.6.0","3.6.1","3.6.2","3.6.3","3.6.4","3.6.5-buildbot-r8718","3.6.5","3.6.6","3.7.0","3.7.1","3.7.2","3.8.0","3.8.1","3.9.0-rc3","3.9.0","3.9.1"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":2,"first_published":null,"last_published":"2026-04-08T17:19:09.877+00:00","dependencies_count":18,"dependencies":["DnsClient","Google.Api.CommonProtos","Google.Protobuf","Grpc.Net.Client","Grpc.Net.ClientFactory","Microsoft.Extensions.DependencyInjection","Microsoft.Extensions.Logging","Microsoft.Extensions.Logging.Abstractions","Microsoft.Extensions.ObjectPool","Newtonsoft.Json","Snappier","System.Diagnostics.DiagnosticSource","System.IO.Hashing","System.IO.Pipelines","System.Linq.AsyncEnumerable","System.Text.Json","System.Threading.Channels","System.Threading.Tasks.Dataflow"]},"bundle":null,"typescript":null,"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"safe_to_use","issues":[],"use_version":"3.9.1","version_hint":null,"summary":"CouchbaseNetClient@3.9.1 is safe to use (health: 83/100)"},"version_scoped":null,"requested_version":null,"_cache":"hit","_response_ms":0,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false}}