If you think the bug you found is likely to make Seata-based applications vulnerable to an attack, please do not use our public issue tracker but report it to ASRC(Alibaba Security Response Center).