Skip to content
OpenAdvisories

Package · Maven

org.apache.fory:fory-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-50076

    Apache Fory: Java ReplaceResolverSerializer deserialization checks bypass

    Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on Java/JVM platforms allows a remote attacker to bypass class registration, TypeChecker, and DisallowedList checks and invoke classpath-present …

    Apache Software Foundation Apache Fory org.apache.fory:fory-core Maven