GHSA-2r4x-667f-mpfhLow

Apache Seata Vulnerable to Deserialization of Untrusted Data

Published
March 20, 2025
Last Modified
March 27, 2026

🔗 CVE IDs covered (1)

CVE-2024-47552 →

📋 Description

Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).

This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.

Users are recommended to upgrade to version 2.2.0, which fixes the issue.

🎯 Affected products1

  • maven/org.apache.seata:seata-config-core:>= 2.0.0, < 2.2.0

🔗 References (6)