What’s Vulnerable › Products

Dromara Sa-Token vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Dromara Sa-Token version is affected

Latest Dromara Sa-Token vulnerabilities

• CVE-2025-15222 — Dromara Sa-Token SaSerializerTemplateForJdkUseBase64.java ObjectInputStream.readObject deserialization (CVSS 5.0)
• CVE-2025-15117 — Dromara Sa-Token SaJdkSerializer.java ObjectInputStream.readObject deserialization (CVSS 3.1)
• CVE-2023-44794 — (CVSS 9.8)
• CVE-2023-43961 — (CVSS 8.8)