Search for packages
| purl | pkg:maven/org.apache.iotdb/iotdb-core@1.3.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-g6qa-mu8d-2uhc
Aliases: CVE-2024-24780 GHSA-f4rq-f4j9-f6rm PYSEC-2025-59 |
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI. This issue affects Apache IoTDB: from 1.0.0 before 1.3.4. Users are recommended to upgrade to version 1.3.4, which fixes the issue. |
Affected by 3 other vulnerabilities. |
|
VCID-gtes-ey5n-7bhg
Aliases: CVE-2026-24713 GHSA-6w48-2g9j-v9q5 |
Apache IoTDB has an Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-jgju-cgt1-eqaa
Aliases: CVE-2025-48392 GHSA-vx84-xvr8-w24c |
Apache IoTDB: DoS Vulnerability A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue. |
Affected by 2 other vulnerabilities. |
|
VCID-jrqf-tcrk-xfev
Aliases: CVE-2026-24015 GHSA-74cf-pgh9-m5q2 |
Apache IoTDB has an Insecure Default Configuration Vulnerability A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||