Taosdata

9 CVEs across 2 Taosdata products. Browse Taosdata vulnerabilities, severities, and proof-of-concept exploits.

Taosdata products with known CVEs

ProductCVEs
Tdengine8
Grafanaplugin1
Taosdata CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-62355Medium5.42026-07-15TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a Data Reader admin_user on a TDengine Cloud DB i…
CVE-2026-62353Medium5.42026-07-15TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, source/libs/parser/src/parTokenizer.c tGetToken() incremented p…
CVE-2026-62351High7.52026-07-15TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, source/libs/transport/src/transComm.c transDecompressMsg() read…
CVE-2026-62350High7.22026-07-15TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user with create udf privilege could upload a c…
CVE-2026-62349High8.32026-07-15TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/libs/parser/src/parUtil.c trimString(…
CVE-2026-62348Medium5.42026-07-15TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, TDengine Enterprise allowed an authenticated low-privilege SQL…
CVE-2026-42542High7.52026-06-10TDengine is an open source, time-series database optimized for Internet of Things devices. In versions 3.4.0.0 through 3.4.1.5, an unauthenticated remote attac…
CVE-2023-38502Medium6.52023-07-25TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested qu…
CVE-2023-34111High8.12023-06-06The `Release PR Merged` workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code exec…