PyPI/apache-iotdb CVE-2025-48459: medium 5.3, EPSS 0.49%

Deserialization of Untrusted Data vulnerability in Apache IoTDB.

Action: Upgrade apache-iotdb to 2.0.5 or later.

pip install apache-iotdb==2.0.5

Affected

Fixed versions

Sources

• osv: PYSEC-2025-88
• http://www.openwall.com/lists/oss-security/2025/09/24/8
• https://lists.apache.org/thread/mr84n19nv8d0bmcrfsj3mm5ff5qn4q2f
• https://github.com/advisories/GHSA-776q-jw43-fhjx

CVE-2025-48459 · published 2025-09-24T08:15:32.810Z · modified 2026-06-10T17:00:30.062570052Z · JSON