Vulnerability PYSEC-2025-88
Medium Risk
MEDIUM RISK
CVSS Score: 5.3
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
September 24, 2025 at 08:15 AM UTC
No summary available
1.0.0 - 2.0.4
1.0.0 - 2.0.4
Details
Deserialization of Untrusted Data vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 1.0.0 before 2.0.5.
Users are recommended to upgrade to version 2.0.5, which fixes the issue.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2079
1.3.3 - 2.0.6 PYSEC-2026-2079
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2080
1.3.3 - 2.0.6 PYSEC-2026-2080
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2081
1.3.3 - 2.0.6 PYSEC-2026-2081
Medium Risk
1 year ago
Apache IoTDB: Deserialization of untrusted Data
1.0.0 - 2.0.4 GHSA-776q-jw43-fhjx
1.0.0 - 2.0.4 GHSA-776q-jw43-fhjx
Medium Risk
1 year ago
Apache IoTDB Discloses Sensitive Information via Log Files
0.10.0 - 1.3.3 and 2.0.1b0 GHSA-5fc3-pqf2-57cx
0.10.0 - 1.3.3 and 2.0.1b0 GHSA-5fc3-pqf2-57cx
Impacted packages
Timeline
Published
1 year ago
September 24, 2025 at 08:15 AM UTC
Fixed (2.0.5)
1 year ago
August 22, 2025 at 01:45 AM UTC
Last Modified
4 months ago
June 10, 2026 at 05:00 PM UTC