Seata (Apache) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2025-08-08. Vendor: Apache.

CVEs of Seata

• CVE-2025-53606 - CVSS 9.8 (critical), 2025-08-08: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): 2.4.0. Users are recommended to…
• CVE-2025-32897 - CVSS 9.8 (critical), 2025-06-28: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range…
• CVE-2024-54016 - CVSS 4.3 (medium), 2025-03-20: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating):…
• CVE-2024-47552 - CVSS 9.8 (critical), 2025-03-20: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0. Severity…
• CVE-2024-22399 - CVSS 9.8 (critical), 2024-09-16: Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on the Seata-Server and do not use the Seata client…