https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:40:08.533659+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-26864 CVE-2025-26864 — Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication 2026-10-03T17:40:08.535439+00:00

Affected: Apache Software Foundation Apache IoTDB

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.

This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.

Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.

 https://cve.radiocsirt.org/vuln/ghsa-5fc3-pqf2-57cx GHSA-5fc3-pqf2-57cx — Apache IoTDB Discloses Sensitive Information via Log Files 2026-10-03T17:40:08.535495+00:00

Affected: Maven: org.apache.iotdb:node-commons, PyPI: apache-iotdb

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.

This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.

Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.