VDB
Sign up
MEDIUM5.3

PYSEC-2025-88

Quick fix

PYSEC-2025-88 — apache-iotdb: upgrade to the fixed version with the command below.

pip install --upgrade 'apache-iotdb>=2.0.5'

Details

Deserialization of Untrusted Data vulnerability in Apache IoTDB.

This issue affects Apache IoTDB: from 1.0.0 before 2.0.5.

Users are recommended to upgrade to version 2.0.5, which fixes the issue.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/apache-iotdb
Introduced in: 1.0.0Fixed in: 2.0.5
Fixpip install --upgrade 'apache-iotdb>=2.0.5'

References