GHSA-C4C3-7FPV-J4Q5 vulnerabilities

Vulnerabilities for packages: drain-cleaner, request-9047-keycloak-fips, knative-kafka-broker-fips, flyway-fips, knative-kafka-broker, cassandra, kafka, seata, spark-fips, spark, floci-az, elasticsearch, keycloak, hadoop-fips, logstash, sonarqube, strimzi-kafka-operator, drain-cleaner-fips,...

GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: apache-hop-fips, celeborn, pinot, hadoop-fips, pinot-fips, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, trino, seata, tez, thingsboard, management-api-for-apache-cassandra-4.1, tinkerpop...

CVE-2026-59902 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, celeborn, pinot, hadoop-fips, pinot-fips, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, trino, seata, tez, thingsboard, management-api-for-apache-cassandra-4.1, tinkerpop...

CVE-2026-73507 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, hadoop-fips, management-api-for-apache-cassandra-5.0, apache-hop, seata, tez, thingsboard, tinkerpop...

GHSA-CRF3-V9RR-V7HJ vulnerabilities

Vulnerabilities for packages: seata...

CVE-2026-16723 vulnerabilities

Vulnerabilities for packages: seata...

GHSA-W3C8-7R8F-9JP8 vulnerabilities

Vulnerabilities for packages: seata...

CVE-2024-38828 vulnerabilities

Vulnerabilities for packages: seata...

GHSA-JQ43-27X9-3V86 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, celeborn, pinot, hadoop-fips, pinot-fips, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, trino, apache-hop, seata, tez, thingsboard, management-api-for-apache-cassandra-4.1, tinkerpop...

CVE-2025-59419 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, celeborn, pinot, hadoop-fips, pinot-fips, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, trino, apache-hop, seata, tez, thingsboard, management-api-for-apache-cassandra-4.1, tinkerpop...

EUVD-2025-23981

Malicious code in bioql PyPI...

EUVD-2025-6741

Malicious code in bioql PyPI...

EUVD-2025-6743

Malicious code in bioql PyPI...

EUVD-2025-19540

Malicious code in bioql PyPI...

Deserialization Of Untrusted Data

org.apache.seata:seata-serializer-fury is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to insecure deserialization due to improper handling of untrusted input data, which could allow attackers to execute arbitrary code...

CVE-2025-53606

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

GHSA-G358-G2PQ-C46J Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...

cc.zzzyu.seata:seata-server (2.4.0), io.xuxiaowei.seata:seata-server (2.4.0) +7 more potentially affected by CVE-2025-53606 via org.apache.seata:seata-serializer-fury (2.4.0)

org.apache.seata:seata-serializer-fury MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.seata:seata-serializer-fury and may be impacted: - cc.zzzyu.seata:seata-server 2.4.0 - io.xuxiaowei.seata:seata-server 2.4.0 -...

cc.zzzyu.seata:seata-server (2.4.0), io.xuxiaowei.seata:seata-server (2.4.0) +7 more potentially affected by CVE-2025-53606 via org.apache.seata:seata-serializer-fury (2.4.0)

org.apache.seata:seata-serializer-fury MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.seata:seata-serializer-fury and may be impacted: - cc.zzzyu.seata:seata-server 2.4.0 - io.xuxiaowei.seata:seata-server 2.4.0 -...

Apache Seata: Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata incubating. This issue affects Apache Seata incubating: 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue...