Skip to content

PatchFirst · Latest vulnerabilities

org.apache.iotdb:iotdb-confignode vulnerabilities

Vulnerabilities published for org.apache.iotdb:iotdb-confignode in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

CVE-2025-48459
Medium · CVSS 5.3EPSS 0.49%Fix available
Apache IoTDB: Deserialization of untrusted Data
Deserialization of Untrusted Data vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 2.0.5. Users are recommended to upgrade to version 2.0.5, which fixes the issue.
org.apache.iotdb:iotdb-confignode
- Update to 2.0.5
Published September 24, 2025Updated November 4, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →