https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 20:18:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-04021 bdu:2025-04021 https://cve.radiocsirt.org/vuln/bdu:2025-04021 https://cve.radiocsirt.org/vuln/cnvd-2025-09241 cnvd-2025-09241 https://cve.radiocsirt.org/vuln/cnvd-2025-09241 https://cve.radiocsirt.org/vuln/euvd-2026-277964 EUVD-2026-277964 https://cve.radiocsirt.org/vuln/euvd-2026-277964 https://cve.radiocsirt.org/vuln/fkie_cve-2024-47552 <p>Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).</p> <p>This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.</p> <p>Severity Justification:</p> <p>The Apache Seata security team assesses the severity of this vulnerability as &#34;Low&#34; due to stringent real-world mitigating factors. First, the vulnerability is strictly isolated to the Raft cluster mode, an optional and non-default feature introduced in v2.0.0, while most users rely on the unaffected traditional architecture. Second, Seata is an internal middleware; communication between TC and RM/TM occurs entirely within trusted internal networks. An attacker would require prior, unauthorized access to the Intranet to exploit this, making external exploitation highly improbable.</p> <p>Users are recommended to upgrade to version 2.2.0, which fixes the issue.</p> <p>Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).</p> <p>This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.</p> <p>Severity Justification:</p> <p>The Apache Seata security team assesses the severity of this vulnerability as &#34;Low&#34; due to stringent real-world mitigating factors. First, the vulnerability is strictly isolated to the Raft cluster mode, an optional and non-default feature introduced in v2.0.0, while most users rely on the unaffected traditional architecture. Second, Seata is an internal middleware; communication between TC and RM/TM occurs entirely within trusted internal networks. An attacker would require prior, unauthorized access to the Intranet to exploit this, making external exploitation highly improbable.</p> <p>Users are recommended to upgrade to version 2.2.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-47552 https://cve.radiocsirt.org/vuln/ghsa-2r4x-667f-mpfh <p><strong>Affected:</strong> Maven: org.apache.seata:seata-config-core</p> <p>Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).</p> <p>This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.</p> <p>Users are recommended to upgrade to version 2.2.0, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.seata:seata-config-core</p> <p>Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).</p> <p>This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0.</p> <p>Users are recommended to upgrade to version 2.2.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-2r4x-667f-mpfh