github.com/influxdata/influxdb (Go) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Go package github.com/influxdata/influxdb, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2019-20933 — CVSS 9.8 (critical): InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT…
• CVE-2018-17572 — CVSS 4.8 (medium): InfluxDB 0.9.5 has Reflected XSS in the Write Data module.