https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:12:44 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-40008 <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName().newInstance() without any validation or allowlisting.</p> <p>This issue affects Apache IoTDB: from 1.0.0 before 2.0.10.</p> <p>Users are recommended to upgrade to version 2.0.10, which fixes the issue.</p> <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName().newInstance() without any validation or allowlisting.</p> <p>This issue affects Apache IoTDB: from 1.0.0 before 2.0.10.</p> <p>Users are recommended to upgrade to version 2.0.10, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-40008 https://vulnerability.circl.lu/vuln/ghsa-v4p4-86j5-2f8q <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName().newInstance() without any validation or allowlisting.</p> <p>This issue affects Apache IoTDB: from 1.0.0 before 2.0.10.</p> <p>Users are recommended to upgrade to version 2.0.10, which fixes the issue.</p> <p>Use of Externally-Controlled Input to Select Classes or Code (&#39;Unsafe Reflection&#39;) vulnerability in Apache IoTDB. The pipe processor reads a fully qualified Java class name and instantiates it using Class.forName().newInstance() without any validation or allowlisting.</p> <p>This issue affects Apache IoTDB: from 1.0.0 before 2.0.10.</p> <p>Users are recommended to upgrade to version 2.0.10, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ghsa-v4p4-86j5-2f8q