—
PYSEC-2025-60
Details
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.
This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.
Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI / apache-iotdb
Introduced in:
0.10.0 Fixed in: 1.3.4 Fix
pip install --upgrade 'apache-iotdb>=1.3.4'