Alibaba / Fastjson
2 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-16723 | Remote Code Execution in fastjson 1.2.68–1.2.83 | CRITICAL | 9.0 | Jul 23, 2026 |
| CVE-2025-70974 | fastjson: Fastjson: Remote Code Execution via JNDI Injection due to autoType mishandling | CRITICAL | 10.0 | Jan 9, 2026 |
| CVE-2022-25845 | Deserialization of Untrusted Data | CRITICAL | 9.8 | Jun 10, 2022 |
| CVE-2017-18349 | parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a cr… | CRITICAL | 9.8 | Oct 23, 2018 |
Showing 1 to 2 of 2 CVEs