As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-41114: Apache IoTDB JDBC driver: Large-scale Memory Exhaustion via BigDecimal toPlainString in JDBC Driver
Apache IoTDB JDBC driver versions 1.3.3 before 2.0.11 contain an uncontrolled resource consumption vulnerability triggered by BigDecimal toPlainString operations. The flaw can lead to large-scale memory exhaustion in systems using affected versions of the driver. The vendor has released version 2.0.11 to address the issue.
Why it matters: Organizations running Apache IoTDB applications with the vulnerable JDBC driver (1.3.3 to 2.0.10) face denial of service risk; patching to version 2.0.11 is necessary to prevent memory exhaustion attacks.
- Source published
- First seen by Cybersecurity Tracker