Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-48392

Fixed upstream EPSS <1%CVSS 7.5

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue.

Published 2025-09-24 · CVE record · OSV

Products: Apache Software Foundation Apache IoTDB

Fixed upstream

EcosystemPackageFixed in
Mavenorg.apache.iotdb:iotdb-core2.0.5