GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: trino, hadoop-fips, tez, seata, apache-hop-fips, pinot, management-api-for-apache-cassandra-4.1, thingsboard, celeborn, pinot-fips, management-api-for-apache-cassandra-5.0...

CVE-2026-59902 vulnerabilities

Vulnerabilities for packages: trino, hadoop-fips, tez, seata, apache-hop-fips, pinot, management-api-for-apache-cassandra-4.1, thingsboard, celeborn, pinot-fips, management-api-for-apache-cassandra-5.0...

CVE-2026-73507 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, seata, apache-hop-fips, apache-hop, thingsboard, management-api-for-apache-cassandra-5.0...

GHSA-CRF3-V9RR-V7HJ vulnerabilities

Vulnerabilities for packages: seata...

CVE-2026-16723 vulnerabilities

Vulnerabilities for packages: seata...

GHSA-W3C8-7R8F-9JP8 vulnerabilities

Vulnerabilities for packages: seata...

CVE-2024-38828 vulnerabilities

Vulnerabilities for packages: seata...

GHSA-JQ43-27X9-3V86 vulnerabilities

Vulnerabilities for packages: trino, hadoop-fips, tez, seata, apache-hop-fips, management-api-for-apache-cassandra-4.0, apache-hop, pinot, management-api-for-apache-cassandra-4.1, thingsboard, celeborn, pinot-fips, management-api-for-apache-cassandra-5.0...

CVE-2025-59419 vulnerabilities

Vulnerabilities for packages: trino, hadoop-fips, tez, seata, apache-hop-fips, management-api-for-apache-cassandra-4.0, apache-hop, pinot, management-api-for-apache-cassandra-4.1, thingsboard, celeborn, pinot-fips, management-api-for-apache-cassandra-5.0...

EUVD-2025-19540

Malicious code in bioql PyPI...

EUVD-2025-23981

Malicious code in bioql PyPI...

EUVD-2025-6743

Malicious code in bioql PyPI...

EUVD-2025-6741

Malicious code in bioql PyPI...

Deserialization Of Untrusted Data

org.apache.seata:seata-serializer-fury is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insecure deserialization due to improper handling of untrusted input data, which could allow attackers to execute arbitrary code...

CVE-2025-53606

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the FurySerializerFactory class, which handles serialized data. An attacker can execute arbitrary code by submitting crafted input to the affected component. Details Serialization is a process of...

GHSA-G358-G2PQ-C46J Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

CVE-2025-53606

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

CVE-2025-53606 Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...