AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

Apache Software FoundationCVE-2026-41114

Apache IoTDB JDBC driver: resource exhaustion

Apache Software Foundation

CVE-2026-41114 · Published Oct 21, 2026 · updated Oct 30, 2026

High7.5
Fix: upgrade to 2.0.11 or later
Apache Software Foundation advisory

Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver.

This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11.

Users are recommended to upgrade to version 2.0.11, which fixes the issue.

Affected versions

PackageAffectedFixed in
Apache IoTDB JDBC driver
Product
>= 1.3.3, < 2.0.112.0.11
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-400

More Apache Software Foundation advisories

All Apache Software Foundation
Medium 6.9Oct 21Apache Traffic Server: request smugglingCVE-2026-111809no fix yetLow 2.3Oct 21Apache Pulsar: missing authorizationCVE-2026-105931fixed in 4.0.14 +1High 7.0Oct 21Apache Traffic Server: request smugglingCVE-2025-55702no fix yetCritical 9.1Oct 21Apache Traffic Server: request smugglingCVE-2025-31699no fix yetCritical 9.2Oct 21Apache Pulsar: improper signature checkCVE-2026-105869fixed in 4.0.14 +1Medium 5.3Oct 21Apache Pulsar: missing authorizationCVE-2026-105926fixed in 4.0.14 +1