CVE-2026-41114

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-41114

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-41114 Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

EUVD-2026-107163

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

CVE-2026-41114

The Apache IoTDB JDBC driver is vulnerable to an Uncontrolled Resource Consumption issue (CWE-400) involving large-scale memory exhaustion via the BigDecimal toPlainString method. This vulnerability specifically affects versions 1.3.3 before 2.0.11 . To remediate this issue, users are recommended...

Vulnerability related to improper resource management in the Apache IoTDB JDBC driver

Versions 1.3.3 through 2.0.11 of the Apache IoTDB JDBC driver contain a resource management error vulnerability. This vulnerability stems from the JDBC driver’s lack of effective control over resource consumption, potentially allowing attackers to exhaust system resources and resulting in a...

PT-2026-120522

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File. An attacker can gain access to sensitive data by exploiting the logging mechanism. Remediation Upgrade org.apache.iotdb:iotdb-jdbc to version 1.3.4, 2.0.2 or higher. References - Apache...

com.ibeetl:iotdb (>=3.1.3-release, <=3.1.4-release), io.edurt.datacap.plugin.jdbc:datacap-plugin-jdbc-iotdb (>=1.3.0, <=1.5.0) +20 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-jdbc (>=0.10.0, <=1.3.3)

org.apache.iotdb:iotdb-jdbc MAVEN version =0.10.0, =3.1.3-release, =1.3.0, =1.6.0, =2024.4.0, =8.6.5-20231023, =0.13.0, =0.14.0-preview2, =0.10.0, =0.12.0, =0.10.0, =0.10.0, =0.13.0, =0.10.0, =0.10.0, =0.12.0, =1.3.2 and more Source cves: CVE-2025-26795 Source advisory:...

com.ibeetl:iotdb (>=3.1.3-release, <=3.1.4-release), io.edurt.datacap.plugin.jdbc:datacap-plugin-jdbc-iotdb (>=1.3.0, <=1.5.0) +20 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-jdbc (>=0.10.0, <=1.3.3)

org.apache.iotdb:iotdb-jdbc MAVEN version =0.10.0, =3.1.3-release, =1.3.0, =1.6.0, =2024.4.0, =8.6.5-20231023, =0.13.0, =0.14.0-preview2, =0.10.0, =0.12.0, =0.10.0, =0.10.0, =0.13.0, =0.10.0, =0.10.0, =0.12.0, =1.3.2 and more Source cves: CVE-2025-26795 Source advisory: GHSA-GP98-HFVM-2R4X...

com.ibeetl:iotdb (>=3.1.3-release, <=3.1.4-release), io.edurt.datacap.plugin.jdbc:datacap-plugin-jdbc-iotdb (>=1.3.0, <=1.5.0) +20 more potentially affected by CVE-2025-26795 via org.apache.iotdb:iotdb-jdbc (>=0.10.0, <=1.3.3)

org.apache.iotdb:iotdb-jdbc MAVEN version =0.10.0, =3.1.3-release, =1.3.0, =1.6.0, =2024.4.0, =8.6.5-20231023, =0.13.0, =0.14.0-preview2, =0.10.0, =0.12.0, =0.10.0, =0.10.0, =0.13.0, =0.10.0, =0.10.0, =0.12.0, =1.3.2 and more Source cves: CVE-2025-26795 Source advisory: OSV:GHSA-GP98-HFVM-2R4X...

CVE-2025-26795

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and...

CVE-2025-26795

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and...

CVE-2025-26795 Apache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and...

PT-2025-21136 · Apache · Iotdb-Jdbc

Name of the Vulnerable Software and Affected Versions: iotdb-jdbc versions 0.10.0 through 1.3.3 iotdb-jdbc versions 2.0.1-beta through 2.0.2 Description: The issue is related to the exposure of sensitive information to an unauthorized actor and the insertion of sensitive information into log file...

CVE-2025-26795: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and...