21 Total advisories
21 Vulnerabilities
0 Malware
Dependency scanning
Check whether apache-iotdb is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
HIGH 7.5
CVE-2026-24012
CVE-2026-24012
CRITICAL 9.8
CVE-2026-24014
CVE-2026-24014
CRITICAL 9.1
CVE-2026-24013
CVE-2026-24013
HIGH 8.8
CVE-2022-38369
CVE-2022-38369
UNKNOWN
CVE-2025-26864
CVE-2025-26864
MEDIUM 5.3
CVE-2025-48459
CVE-2025-48459
UNKNOWN
CVE-2022-43766
CVE-2022-43766
UNKNOWN
CVE-2023-24831
CVE-2023-24831
UNKNOWN
CVE-2024-24780
CVE-2024-24780
CRITICAL 9.8
CVE-2023-46226
CVE-2023-46226
HIGH 7.5
CVE-2022-43766
Apache IoTDB subject to ReDOS with Java 8
MEDIUM 5.3
CVE-2025-48459
Apache IoTDB: Deserialization of untrusted Data
HIGH 7.5
PYSEC-2022-43070
PYSEC-2022-43070
UNKNOWN
CVE-2023-30771
CVE-2023-30771
CRITICAL 9.8
CVE-2024-24780
Apache IoTDB Vulnerable to Remote Code Execution
UNKNOWN
CVE-2025-26864
Apache IoTDB Discloses Sensitive Information via Log Files
CRITICAL 9.8
CVE-2023-46226
Remote Code Execution vulnerability in Apache IoTDB via UDF
HIGH 8.8
CVE-2022-38369
Apache IoTDB Session Fixation vulnerability
CRITICAL 9.8
CVE-2023-24831
Apache IoTDB Grafana Connector vulnerable to Improper Authentication
UNKNOWN
CVE-2023-24830
CVE-2023-24830
UNKNOWN
CVE-2023-24829
CVE-2023-24829
Browse more PyPI advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes