org.thingsboard:application vulnerabilities (Maven)

2 vulnerabilities.

• org.thingsboard:application Maven ThingsBoard allows an authenticated user to upload malicious SVG images CVE-2025-3261 Fix availableRejected 6.2 MediumNovember 27, 2025
• org.thingsboard:application Maven Stored Cross-Site Scripting (XSS) in ThingsBoard CVE-2025-34281 Fix available 6.2 MediumOctober 17, 2025