GHSA-97rv-88gf-phvr

GitHub Security Advisory

Apache Dubbo: Bypass deny serialize list check in Apache Dubbo

✓ GitHub Reviewed CRITICAL Has CVE

Deserialization of Untrusted Data vulnerability in Apache Dubbo.This issue only affects Apache Dubbo 3.1.5.

Users are recommended to upgrade to the latest version, which fixes the issue.

Maven org.apache.dubbo:dubbo

Affected versions: 3.1.5 (fixed in 3.1.6)

CVE-2023-46279

GHSA ID

GHSA-97rv-88gf-phvr

Published

December 15, 2023 9:30 AM

Last Modified

February 13, 2025 7:28 PM

CVSS Score

9.0 /10

Primary Ecosystem

Maven

Primary Package

org.apache.dubbo:dubbo

GitHub Reviewed

✓ Yes

Last updated: July 27, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.