Seatunnel (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 56 known versions, newest CVE from 2025-06-19. Vendor: Apache.

CVEs of Seatunnel

• CVE-2025-32896 - CVSS 6.5 (medium), 2025-06-19: # Summary Unauthorized users can perform Arbitrary File Read and Deserialization attack by submit job using restful api-v1. # Details Unauthorized users can…
• CVE-2023-49198 - CVSS 7.5 (high), 2024-08-21: Mysql security vulnerability in Apache SeaTunnel. Attackers can read files on the MySQL server by modifying the information in the MySQL URL…
• CVE-2023-48396 - CVSS 9.1 (critical), 2024-07-30: Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user.…