MEDIUMMavenPyPI
GHSA-5fc3-pqf2-57cx· CVE-2025-26864, PYSEC-2025-60Apache IoTDB Discloses Sensitive Information via Log Files
Modified: 7/2/2025
package
PyPI/apache-iotdb
pkg:pypi/apache-iotdb
MEDIUM5.3MavenPyPI
GHSA-776q-jw43-fhjx· CVE-2025-48459, PYSEC-2025-88Apache IoTDB: Deserialization of untrusted Data
Modified: 6/5/2026
CRITICAL9.8MavenPyPI
GHSA-f4rq-f4j9-f6rm· CVE-2024-24780, PYSEC-2025-59Apache IoTDB Vulnerable to Remote Code Execution
Modified: 7/2/2025
HIGH7.5MavenPyPI
GHSA-g6hg-4v3c-6jq7· CVE-2022-43766, PYSEC-2022-42972Apache IoTDB subject to ReDOS with Java 8
Modified: 6/9/2026
HIGH8.8MavenPyPI
GHSA-g6vm-3ch8-c6jq· CVE-2022-38369, PYSEC-2022-43069Apache IoTDB Session Fixation vulnerability
Modified: 11/26/2024
CRITICAL9.8MavenPyPI
GHSA-pvjv-386f-c8wh· CVE-2023-24831, PYSEC-2023-7Apache IoTDB Grafana Connector vulnerable to Improper Authentication
Modified: 9/12/2024
CRITICAL9.8MavenPyPI
GHSA-rxgg-273w-rfw7· CVE-2023-46226, PYSEC-2024-11Remote Code Execution vulnerability in Apache IoTDB via UDF
Modified: 6/20/2025
—PyPI
PYSEC-2022-42972· CVE-2022-43766, GHSA-g6hg-4v3c-6jq7Modified: 6/10/2026
HIGH8.8PyPI
PYSEC-2022-43069· CVE-2022-38369, GHSA-g6vm-3ch8-c6jqModified: 7/1/2026
—PyPI
PYSEC-2023-5· CVE-2023-24829Modified: 11/8/2023
—PyPI
PYSEC-2023-6· CVE-2023-24830Modified: 11/8/2023
—PyPI
PYSEC-2023-7· CVE-2023-24831, GHSA-pvjv-386f-c8whModified: 6/10/2026
—PyPI
PYSEC-2023-8· CVE-2023-30771Modified: 10/9/2025
CRITICAL9.8PyPI
PYSEC-2024-11· CVE-2023-46226, GHSA-rxgg-273w-rfw7Modified: 6/10/2026
—PyPI
PYSEC-2025-59· CVE-2024-24780, GHSA-f4rq-f4j9-f6rmModified: 6/10/2026
—PyPI
PYSEC-2025-60· CVE-2025-26864, GHSA-5fc3-pqf2-57cxModified: 6/10/2026
MEDIUM5.3PyPI
PYSEC-2025-88· CVE-2025-48459, GHSA-776q-jw43-fhjxModified: 6/10/2026
HIGH7.5PyPI
PYSEC-2026-2079· CVE-2026-24012Modified: 7/8/2026
CRITICAL9.1PyPI
PYSEC-2026-2080· CVE-2026-24013Modified: 7/8/2026
CRITICAL9.8PyPI
PYSEC-2026-2081· CVE-2026-24014Modified: 7/8/2026