~ / search / GHSA-74cf-pgh9-m5q2

GHSA-74cf-pgh9-m5q2

Apache IoTDB has an Insecure Default Configuration Vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-24015

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.iotdb:iotdb-core >= 1.0.0, < 1.3.7 1.3.7
Maven org.apache.iotdb:iotdb-core >= 2.0.0, < 2.0.7 2.0.7

Details

As written in the advisory (Markdown source, shown as plain text).

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.