Eventmesh (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2025-08-20. Vendor: Apache.

CVEs of Eventmesh

• CVE-2024-39954 - CVSS 6.3 (medium), 2025-08-20: CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse…
• CVE-2024-56180 - CVSS 9.8 (critical), 2025-02-14: CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on…
• CVE-2023-26512 - CVSS 9.8 (critical), 2023-07-17: CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g.…