Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:40:08 +0000 CVE-2025-26864 — Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication https://cve.radiocsirt.org/vuln/cve-2025-26864 <p><strong>Affected:</strong> Apache Software Foundation Apache IoTDB</p> <p>Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.</p> <p>This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.</p> <p>Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache IoTDB</p> <p>Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.</p> <p>This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.</p> <p>Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.</p> https://cve.radiocsirt.org/vuln/cve-2025-26864 GHSA-5fc3-pqf2-57cx — Apache IoTDB Discloses Sensitive Information via Log Files https://cve.radiocsirt.org/vuln/ghsa-5fc3-pqf2-57cx <p><strong>Affected:</strong> Maven: org.apache.iotdb:node-commons, PyPI: apache-iotdb</p> <p>Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.</p> <p>This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.</p> <p>Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.iotdb:node-commons, PyPI: apache-iotdb</p> <p>Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.</p> <p>This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.</p> <p>Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-5fc3-pqf2-57cx