All products

org.thingsboard:application

Maven · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ThingsBoard vulnerable to stored cross-site scripting (XSS) vulnerability in the dashboard's Image Upload Gallery featureCVE-2025-34281 · GHSA-FPQ4-R87V-G246 org.thingsboard:application Maven Medium Fix reported
ThingsBoard allows an authenticated user to upload malicious SVG imagesCVE-2025-3261 · GHSA-5P82-2Q3R-WJ3M org.thingsboard:application Maven Medium Fix reported