401 matches found
GHSA-PWQR-WMGM-9RR8 vulnerabilities
Vulnerabilities for packages: wavefront-proxy, hadoop-fips, camunda, kafka-bridge, keycloak-fips, wazuh-indexer, infinispan, seata, celeborn, apache-pulsar-fips, knative-kafka-broker-fips, logstash, tez, reposilite, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1,...
CVE-2026-24308 vulnerabilities
Vulnerabilities for packages: tez, strimzi-kafka-operator, apache-nifi, kserve-modelmesh, zookeeper, apache-pulsar, solr, spark, thingsboard, druid, akhq, trino, apache-activemq-artemis...
GHSA-CRHR-QQJ8-RPXC vulnerabilities
Vulnerabilities for packages: tez, strimzi-kafka-operator, apache-nifi, kserve-modelmesh, zookeeper, apache-pulsar, solr, spark, thingsboard, druid, akhq, trino, apache-activemq-artemis...
CLEANSTART-2026-SP64433 Security fixes for GHSA-6RW7-VPXM-498P, GHSA-73RR-HH4G-FPGX, GHSA-8QQ5-RM4J-MR97 applied in versions: 4.2.1.1-r1
Multiple security vulnerabilities affect the thingsboard package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-24733 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-66614 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-FPJ8-GQ4V-P354 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: kayenta-fips, thingsboard, kayenta, nacos, ontop, nacos-docker, ontop-fips...
CVE-2025-66614 vulnerabilities
Vulnerabilities for packages: kayenta-fips, thingsboard, kayenta, nacos, ontop, nacos-docker, ontop-fips...
CVE-2026-24733 vulnerabilities
Vulnerabilities for packages: kayenta-fips, thingsboard, kayenta, nacos, ontop, nacos-docker, ontop-fips...
GHSA-FPJ8-GQ4V-P354 vulnerabilities
Vulnerabilities for packages: kayenta-fips, thingsboard, kayenta, nacos, ontop, nacos-docker, ontop-fips...
CVE-2022-31861
Cross site Scripting XSS in ThingsBoard IoT Platform through 3.3.4.1 via a crafted value being sent to the audit logs...
CVE-2023-45303
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...
CVE-2024-34750 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-WM9W-RJJ3-J356 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-PJ86-CFQH-VQX6 vulnerabilities
Vulnerabilities for packages: sqlpad, thingsboard, argo-workflows, saf, tileserver-gl, json-server...
CVE-2024-51999 vulnerabilities
Vulnerabilities for packages: sqlpad, thingsboard, argo-workflows, saf, tileserver-gl, json-server...