Eventmesh vulnerabilities

2 known vulnerabilities in Eventmesh from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache EventMesh: Deserialization of Untrusted Data

  CVE-2024-56180Feb 14, 2025Apache

  CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian

• 9.8 Critical severity

  Apache EventMesh (incubating) RabbitMQ connector: Deserialization of Untrusted Data

  CVE-2023-26512Jul 17, 2023ApacheEPSS 1.36%

  CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via rabbitmq messages. U