https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T11:02:55.618550+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-238105 EUVD-2026-238105 2026-10-22T11:02:55.622016+00:00 EUVD-2026-238105 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43766 fkie_cve-2022-43766 2026-10-22T11:02:55.622073+00:00

Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 which addresses this issue or use a later version of Java to avoid it.

 https://cve.radiocsirt.org/vuln/ghsa-g6hg-4v3c-6jq7 GHSA-g6hg-4v3c-6jq7 — Apache IoTDB subject to ReDOS with Java 8 2026-10-22T11:02:55.622125+00:00

Affected: Maven: org.apache.iotdb:flink-tsfile-connector, PyPI: apache-iotdb, Maven: org.apache.iotdb:iotdb-server, Maven: org.apache.iotdb:tsfile

Apache IoTDB versions 0.12.2 through 0.12.6, and 0.13.0 through 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. This issue is patched in 0.13.3. Users should upgrade or use a later version of Java to avoid it.

 https://cve.radiocsirt.org/vuln/gsd-2022-43766 gsd-2022-43766 2026-10-22T11:02:55.622184+00:00 gsd-2022-43766 https://cve.radiocsirt.org/vuln/pysec-2022-42972 PYSEC-2022-42972 2026-10-22T11:02:55.622207+00:00

Affected: PyPI: apache-iotdb

Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 which addresses this issue or use a later version of Java to avoid it.