GHSA-W3C8-7R8F-9JP8 vulnerabilities

Vulnerabilities for packages: seata...

CVE-2024-38828 vulnerabilities

Vulnerabilities for packages: seata...

CVE-2025-59419 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, seata, hadoop-fips, thingsboard, management-api-for-apache-cassandra-4.1, trino, management-api-for-apache-cassandra-4.0, tez, apache-hop, pinot-fips, apache-hop-fips...

GHSA-JQ43-27X9-3V86 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, celeborn, seata, hadoop-fips, thingsboard, management-api-for-apache-cassandra-4.1, trino, management-api-for-apache-cassandra-4.0, tez, apache-hop, pinot-fips, apache-hop-fips...

EUVD-2025-19540

Malicious code in bioql PyPI...

EUVD-2025-6741

Malicious code in bioql PyPI...

EUVD-2025-6743

Malicious code in bioql PyPI...

EUVD-2025-23981

Malicious code in bioql PyPI...

Deserialization Of Untrusted Data

org.apache.seata:seata-serializer-fury is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insecure deserialization due to improper handling of untrusted input data, which could allow attackers to execute arbitrary code...

CVE-2025-53606

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the FurySerializerFactory class, which handles serialized data. An attacker can execute arbitrary code by submitting crafted input to the affected component. Details Serialization is a process of...

GHSA-G358-G2PQ-C46J Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

cc.zzzyu.seata:seata-server (=2.4.0), io.xuxiaowei.seata:seata-server (=2.4.0) +7 more potentially affected by CVE-2025-53606 via org.apache.seata:seata-serializer-fury (=2.4.0)

org.apache.seata:seata-serializer-fury MAVEN version =2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.seata:seata-serializer-fury and may be impacted: - cc.zzzyu.seata:seata-server =2.4.0 - io.xuxiaowei.seata:seata-server =2.4.0 -...

Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

CVE-2025-53606

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

CVE-2025-53606

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

CVE-2025-53606 Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

CVE-2025-53606

CVE-2025-53606 describes a Deserialization of Untrusted Data vulnerability in Apache Seata (incubating) affecting version 2.4.0 . The issue allows high-severity impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with network-prioritized exploitation and no user interaction required. The recom...

CVE-2025-53606 Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

PT-2025-32351 · Apache · Apache Seata

Name of the Vulnerable Software and Affected Versions: Apache Seata incubating version 2.4.0 Description: The software is susceptible to a deserialization of untrusted data issue. Successful exploitation of this issue could allow attackers to execute arbitrary code. The vulnerability impacts...