CVE-2025-53606
Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server
Summary
Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server
Original description
The description as published by the source.
Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).
This issue affects Apache Seata (incubating): 2.4.0.
Users are recommended to upgrade to version 2.5.0, which fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com