CVE-2025-53606: Apache Seata: Deserialization of untrusted Data in Apache Seata Server
Severity: Critical
CVSS Score: 9.8
Deserialization of Untrusted Data vulnerability in Apache Seata (incubating).
This issue affects Apache Seata (incubating): 2.4.0.
Users are recommended to upgrade to version 2.5.0, which fixes the issue.