org.apache.iotdb:iotdb-core vulnerabilities (Maven)

5 vulnerabilities.

• org.apache.iotdb:iotdb-core Maven Apache IoTDB: JEXL Expression Injection Vulnerability CVE-2026-24713 Fix available 9.8 CriticalMarch 9, 2026
• org.apache.iotdb:iotdb-core Maven Apache IoTDB: Insecure Default Configuration Vulnerability CVE-2026-24015 Fix available 9.8 CriticalMarch 9, 2026
• org.apache.iotdb:iotdb-core Maven Apache IoTDB: DoS Vulnerability CVE-2025-48392 Fix available 7.5 HighSeptember 24, 2025
• org.apache.iotdb:iotdb-core Maven Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function CVE-2024-24780 Fix available 9.8 CriticalMay 14, 2025
• org.apache.iotdb:iotdb-core Maven Apache IoTDB: Remote Code Execution (RCE) risk via the UDF CVE-2023-46226 Fix available 9.8 CriticalJanuary 15, 2024