Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.iotdb/iotdb-confignode@2.0.5
purl pkg:maven/org.apache.iotdb/iotdb-confignode@2.0.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gvfr-2jus-ebf2 Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recommended to upgrade to version 2.0.5, which fixes the issue. CVE-2025-48459
GHSA-776q-jw43-fhjx
PYSEC-2025-88

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:50:23.149834+00:00 GHSA Importer Fixing VCID-gvfr-2jus-ebf2 https://github.com/advisories/GHSA-776q-jw43-fhjx 38.6.0
2026-06-04T17:08:19.790960+00:00 GithubOSV Importer Fixing VCID-gvfr-2jus-ebf2 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/09/GHSA-776q-jw43-fhjx/GHSA-776q-jw43-fhjx.json 38.6.0
2026-06-02T04:47:57.529267+00:00 GitLab Importer Fixing VCID-gvfr-2jus-ebf2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.iotdb/iotdb-confignode/CVE-2025-48459.yml 38.6.0