org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:iotdb-distribution (>=1.3.3, <=2.0.1-beta) potentially affected by CVE-2025-48459 via org.apache.iotdb:iotdb-confignode (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-confignode MAVEN version =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta Source cves: CVE-2025-48459 Source advisory: GHSA-776Q-JW43-FHJX...

GHSA-776Q-JW43-FHJX Apache IoTDB: Deserialization of untrusted Data

Summary Apache IoTDB deserializes data from external inputs without sufficient validation, allowing attacker-controlled serialized objects to be processed. In environments where a compatible gadget chain is reachable, this can be abused to execute arbitrary code or alter server state; at minimum ...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation via the process handling incoming requests. An attacker can cause the service to become unresponsive by sending specially crafted input. Remediation Upgrade org.apache.iotdb:iotdb-core to version 2.0.5 or highe...

org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:iotdb-distribution (>=1.3.3, <=2.0.1-beta) potentially affected by CVE-2025-48459 via org.apache.iotdb:iotdb-confignode (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-confignode MAVEN version =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta Source cves: CVE-2025-48459 Source advisory: SNYK:JAVA-ORGAPACHEIOTDB-13053298...

GHSA-VX84-XVR8-W24C Apache IoTDB: DoS Vulnerability

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:iotdb-distribution (>=1.3.3, <=2.0.1-beta) potentially affected by CVE-2025-48459 via org.apache.iotdb:iotdb-confignode (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-confignode MAVEN version =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta Source cves: CVE-2025-48459 Source advisory: OSV:GHSA-776Q-JW43-FHJX...

Apache IoTDB: DoS Vulnerability

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

Apache IoTDB: Deserialization of untrusted Data

Summary Apache IoTDB deserializes data from external inputs without sufficient validation, allowing attacker-controlled serialized objects to be processed. In environments where a compatible gadget chain is reachable, this can be abused to execute arbitrary code or alter server state; at minimum ...

anylearn (>=0.20.5rc1, <=0.20.7), pymetard (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2025-48459 via apache-iotdb (>=1.3.2.post0, <=1.3.4)

apache-iotdb PYPI version =1.3.2.post0, =0.20.5rc1, =0.0.1, =0.0.4 - syunity-meteo 0.1.0 Source cves: CVE-2025-48459 Source advisory: OSV:GHSA-776Q-JW43-FHJX...

anylearn (>=0.20.5rc1, <=0.20.7), pymetard (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2025-48459 via apache-iotdb (>=1.3.2.post0, <=1.3.4)

apache-iotdb PYPI version =1.3.2.post0, =0.20.5rc1, =0.0.1, =0.0.4 - syunity-meteo 0.1.0 Source cves: CVE-2025-48459 Source advisory: GHSA-776Q-JW43-FHJX...

anylearn (>=0.20.5rc1, <=0.20.7), pymetard (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2025-48459 via apache-iotdb (>=1.3.2.post0, <=1.3.4)

apache-iotdb PYPI version =1.3.2.post0, =0.20.5rc1, =0.0.1, =0.0.4 - syunity-meteo 0.1.0 Source cves: CVE-2025-48459 Source advisory: OSV:PYSEC-2025-88...

PYSEC-2025-88

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 before 2.0.5.Users are recommended to upgrade to version 2.0.5, which fixes the issue...

PYSEC-2025-88

Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

CVE-2025-48459

Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

CVE-2025-48392

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

CVE-2025-48392 Apache IoTDB: DoS Vulnerability

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

CVE-2025-48392

Apache IoTDB contains a DoS vulnerability affecting 1.3.3–1.3.4 and 2.0.1-beta–2.0.4. The issue is fixed in 2.0.5. CVSS v3.1 metrics from NVD indicate HIGH impact with Availability loss (A=HIGH) and no confidentiality/integrity impact, network attack vector, low complexity, no auth required. Affe...

CVE-2025-48392 Apache IoTDB: DoS Vulnerability

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue...

org.apache.iotdb:integration-test (>=1.3.3, <=2.0.1-beta), org.apache.iotdb:iotdb-distribution (>=1.3.3, <=2.0.1-beta) potentially affected by CVE-2025-48459 via org.apache.iotdb:iotdb-confignode (>=1.3.3, <=2.0.1-beta)

org.apache.iotdb:iotdb-confignode MAVEN version =1.3.3, =1.3.3, =1.3.3, =2.0.1-beta Source cves: CVE-2025-48459 Source advisory: MEND:CVE-2025-48459...

anylearn (>=0.20.5rc1, <=0.20.7), pymetard (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2025-48459 via apache-iotdb (>=1.3.2.post0, <=1.3.4)

apache-iotdb PYPI version =1.3.2.post0, =0.20.5rc1, =0.0.1, =0.0.4 - syunity-meteo 0.1.0 Source cves: CVE-2025-48459 Source advisory: MEND:CVE-2025-48459...