401 matches found
GHSA-PWQR-WMGM-9RR8 vulnerabilities
Vulnerabilities for packages: hono, flyway, seata, sonarqube, opensearch-fips, commercial-elasticsearch, spark-fips, apache-activemq-artemis, reposilite, infinispan, tez, kafbat-ui-fips, wavefront-proxy, apache-pulsar-fips, akhq, pinot, strimzi-kafka-operator, kafka-bridge-fips,...
GHSA-CRHR-QQJ8-RPXC vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, zookeeper, thingsboard, tez, strimzi-kafka-operator, spark, apache-pulsar, akhq, kserve-modelmesh, solr, apache-nifi, druid, trino...
CVE-2026-24308 vulnerabilities
Vulnerabilities for packages: apache-activemq-artemis, zookeeper, thingsboard, tez, strimzi-kafka-operator, spark, apache-pulsar, akhq, kserve-modelmesh, solr, apache-nifi, druid, trino...
CLEANSTART-2026-SP64433 Security fixes for GHSA-6RW7-VPXM-498P, GHSA-73RR-HH4G-FPGX, GHSA-8QQ5-RM4J-MR97 applied in versions: 4.2.1.1-r1
Multiple security vulnerabilities affect the thingsboard package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-66614 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-24733 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-FPJ8-GQ4V-P354 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: nacos-docker, ontop-fips, ontop, nacos, thingsboard, kayenta, kayenta-fips...
CVE-2025-66614 vulnerabilities
Vulnerabilities for packages: nacos-docker, ontop-fips, ontop, nacos, thingsboard, kayenta, kayenta-fips...
CVE-2026-24733 vulnerabilities
Vulnerabilities for packages: nacos-docker, ontop-fips, ontop, nacos, thingsboard, kayenta, kayenta-fips...
GHSA-FPJ8-GQ4V-P354 vulnerabilities
Vulnerabilities for packages: nacos-docker, ontop-fips, ontop, nacos, thingsboard, kayenta, kayenta-fips...
CVE-2022-31861
Cross site Scripting XSS in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs...
CVE-2023-45303
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...
GHSA-WM9W-RJJ3-J356 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2024-34750 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-PJ86-CFQH-VQX6 vulnerabilities
Vulnerabilities for packages: saf, thingsboard, argo-workflows, tileserver-gl, sqlpad, json-server...
CVE-2024-51999 vulnerabilities
Vulnerabilities for packages: saf, thingsboard, argo-workflows, tileserver-gl, sqlpad, json-server...