Apache Seata (incubating)

3 results · Clear filters · Feed

• Critical 9.8
  CVE-2025-53606

  Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

  Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue.

  Apache Software Foundation Apache Seata (incubating) org.apache.seata:seata-serializer-fury Maven
  Aug 8, 2025
• Critical 9.8
  CVE-2025-32897

  Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

  Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata (incubatin…

  Apache Software Foundation Apache Seata (incubating) org.apache.seata:seata-config-core Maven
  Jun 28, 2025
• Critical 9.8
  CVE-2024-47552

  Apache Seata (incubating): Deserialization of untrusted Data in jraft mode in Apache Seata Server

  Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0. Severity Justification: The Apache Seata security team assesses the severity of this vulnerability as "Low" du…

  Apache Software Foundation Apache Seata (incubating) org.apache.seata:seata-config-core Maven
  Mar 20, 2025