cc.chensoul.nacos:core-test (2.5.2), cc.chensoul.nacos:nacos-address (2.5.2) +374 more potentially affected by CVE-2026-93446 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.90, <=9.0.122)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.90, =2.4.0, =0.0.6, =0.0.7 and more Source cves: CVE-2026-93446 Source advisory: MEND:CVE-2026-93446...

cc.chensoul.nacos:core-test (2.5.2), cc.chensoul.nacos:nacos-address (2.5.2) +346 more potentially affected by CVE-2026-88041 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.93, <=9.0.122)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.93, =2.4.0, =0.0.6, =0.0.7 and more Source cves: CVE-2026-88041 Source advisory: MEND:CVE-2026-88041...

GHSA-C4C3-7FPV-J4Q5 vulnerabilities

Vulnerabilities for packages: hono, kayenta-fips, spark, zookeeper, elasticsearch, celeborn, commercial-elasticsearch, knative-kafka-broker-fips, flyway-fips, strimzi-kafka-operator, neo4j, apache-nifi, hadoop-fips, floci, pinot, logstash, keycloak-fips, flyway, cassandra, druid, drain-cleaner,...

CVE-2026-59902 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, trino, management-api-for-apache-cassandra-5.0, apache-hop-fips, pinot, tinkerpop, pinot-fips, celeborn, management-api-for-apache-cassandra-4.1, seata, thingsboard, management-api-for-apache-cassandra-4.0...

GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, trino, management-api-for-apache-cassandra-5.0, apache-hop-fips, pinot, tinkerpop, pinot-fips, celeborn, management-api-for-apache-cassandra-4.1, seata, thingsboard, management-api-for-apache-cassandra-4.0...

CVE-2026-73507 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, management-api-for-apache-cassandra-5.0, apache-hop, apache-hop-fips, tinkerpop, seata, thingsboard...

CVE-2026-16723 vulnerabilities

Vulnerabilities for packages: seata...

GHSA-CRF3-V9RR-V7HJ vulnerabilities

Vulnerabilities for packages: seata...

GHSA-W3C8-7R8F-9JP8 vulnerabilities

Vulnerabilities for packages: seata...

CVE-2024-38828 vulnerabilities

Vulnerabilities for packages: seata...

CVE-2025-59419 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, trino, management-api-for-apache-cassandra-5.0, apache-hop, apache-hop-fips, pinot, tinkerpop, pinot-fips, celeborn, management-api-for-apache-cassandra-4.1, seata, thingsboard, management-api-for-apache-cassandra-4.0...

GHSA-JQ43-27X9-3V86 vulnerabilities

Vulnerabilities for packages: hadoop-fips, tez, trino, management-api-for-apache-cassandra-5.0, apache-hop, apache-hop-fips, pinot, tinkerpop, pinot-fips, celeborn, management-api-for-apache-cassandra-4.1, seata, thingsboard, management-api-for-apache-cassandra-4.0...

EUVD-2025-6741

Malicious code in bioql PyPI...

EUVD-2025-6743

Malicious code in bioql PyPI...

EUVD-2025-19540

Malicious code in bioql PyPI...

EUVD-2025-23981

Malicious code in bioql PyPI...

Deserialization Of Untrusted Data

org.apache.seata:seata-serializer-fury is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insecure deserialization due to improper handling of untrusted input data, which could allow attackers to execute arbitrary code...

CVE-2025-53606

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

GHSA-G358-G2PQ-C46J Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the FurySerializerFactory class, which handles serialized data. An attacker can execute arbitrary code by submitting crafted input to the affected component. Details Serialization is a process of...