org.thingsboard:application (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.thingsboard:application, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2025-34281 — CVSS 5.4 (medium): ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a…
• CVE-2025-3261: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.