PatchTheCVE: seatahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-53606: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seatahttps://patchthecve.com/cve/CVE-2025-53606.htmlhttps://patchthecve.com/cve/CVE-2025-53606.htmlWed, 17 Jun 2026 09:38:34 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): 2.4.0. Users are recommended to upgrade to version 2.5.0, which fixes the issue.CVE-2025-32897: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is https://patchthecve.com/cve/CVE-2025-32897.htmlhttps://patchthecve.com/cve/CVE-2025-32897.htmlWed, 17 Jun 2026 09:12:46 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata (incubating): from 2.0.0 before 2.3.0. Severity JCVE-2024-54016: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Seata (incubating). https://patchthecve.com/cve/CVE-2024-54016.htmlhttps://patchthecve.com/cve/CVE-2024-54016.htmlWed, 17 Jun 2026 08:09:40 +0000MEDIUM 4.3: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): through <=2.2.0. Users are recommended to upgrade to version 2.3.0, which fixes the issue.CVE-2024-47552: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Shttps://patchthecve.com/cve/CVE-2024-47552.htmlhttps://patchthecve.com/cve/CVE-2024-47552.htmlWed, 17 Jun 2026 07:57:17 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This issue affects Apache Seata (incubating): from 2.0.0 before 2.2.0. Severity Justification: The Apache Seata security team assesses the severity of this vulnerability as "Low" due to stringent real-world mitiCVE-2024-22399: Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on thttps://patchthecve.com/cve/CVE-2024-22399.htmlhttps://patchthecve.com/cve/CVE-2024-22399.htmlWed, 17 Jun 2026 07:11:20 +0000CRITICAL 9.8: Deserialization of Untrusted Data vulnerability in Apache Seata.  When developers disable authentication on the Seata-Server and do not use the Seata client SDK dependencies, they may construct uncontrolled serialized malicious requests by directly sending bytecode based on the Seata private protoc