Critical
CVSS 9.8
Overview
Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).
This issue affects Apache Seata (incubating): 2.4.0.
Users are recommended to upgrade to version 2.5.0, which fixes the issue.
CVE-2025-53606
Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). T...
Risk analysis
This vulnerability is rated 🔴 CRITICAL.
- CVSS: 9.8 (CRITICAL)
- Detected tags: apache, deserialization (tag impact: MODERATE)
Recommended actions:
- Avoid untrusted deserialization; prefer safe formats (JSON) and signatures.