- Latest release
- 2.4.1 (Sep 8, 2021): affected by 3 advisories
- Newest unaffected release
- Every release is affected by at least one advisory
- Advisories
- 7 · 2 critical, 1 high
- Dependents
- 0
- Releases
- 13 since 2.1.3 (Dec 10, 2015)
- Registry
- Maven Central
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2023-36812Affects 2.1.3 to 2.4.1 (through the newest release)
- CVE-2023-25827Affects 2.1.3 to 2.4.1 (through the newest release)
- CVE-2023-25826Affects 2.1.3 to 2.4.1 (through the newest release)
- CVE-2020-35476Affects 2.1.3 to 2.4.0 (2.4.1 is outside it)
- CVE-2018-13003Affects 2.1.3 to 2.3.0 (2.3.1 is outside it)
- CVE-2018-12973Affects 2.1.3 to 2.3.0 (2.3.1 is outside it)
- CVE-2018-12972Affects 2.1.3 to 2.3.0 (2.3.1 is outside it)
Advisories 7
- CVE-2023-36812Critical 9.8
Remote Code Execution in OpenTSDB
Affected: fixed in 2.4.2.
No fix released. The advisory names 2.4.2 as the fix, which the registry doesn't have yet. The latest release, 2.4.1, is still affected.
- CVE-2023-25827High 8.2
Cross-site Scripting in OpenTSDB
Affected: through 2.4.1.
No fix released. The latest release, 2.4.1, is still affected.
- CVE-2023-25826Critical 9.8
Remote Code Execution in OpenTSDB
Affected: through 2.4.1.
No fix released. The latest release, 2.4.1, is still affected.
- CVE-2020-35476Unrated
A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter.
Affected: through 2.4.0.
Fixed in 2.4.1 (released Sep 8, 2021, 266 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2.4.1, is not affected.
- CVE-2018-13003Unrated
An issue was discovered in OpenTSDB 2.3.0.
Affected: through 2.3.0.
Fixed in 2.3.1 (released May 22, 2018, 38 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2.4.1, is not affected.
- CVE-2018-12973Unrated
An issue was discovered in OpenTSDB 2.3.0.
Affected: through 2.3.0.
Fixed in 2.3.1 (released May 22, 2018, 38 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2.4.1, is not affected.
- CVE-2018-12972Unrated
An issue was discovered in OpenTSDB 2.3.0.
Affected: through 2.3.0.
Fixed in 2.3.1 (released May 22, 2018, 38 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 2.4.1, is not affected.