CVE-2024-56180

Apache EventMesh is vulnerable to CWE-502 Deserialization of Untrusted Data within the eventmesh-meta-raft plugin module. This flaw affects the master branch (without release version) on Windows, Linux, and macOS platforms. An attacker can exploit this by sending controlled messages via the hessi...