CVE-2026-41114
CVE-2026-41114 · Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.
EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
apache iotdb jdbc driver
- Versions
- ≥ 1.3.3, < 2.0.11: Affected (semver)
Update to 2.0.11