Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-54016 EUVD-2025-6741GHSA-65vg-64g8-mwjr

compression bomb attack in Apache Seata Server

Published Mar 20, 2025 · Updated Mar 20, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Seata (incubating) Package: org.apache.seata:seata-parent Ecosystem: Maven

Description

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Seata (incubating).

This issue affects Apache Seata (incubating): through <=2.2.0.

Users are recommended to upgrade to version 2.3.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Seata (incubating) ≤ <=2.2.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.seata:seata-parent >= 2.0.0, < 2.3.0 2.3.0 GHSA-65vg-64g8-mwjr

References