Skip to content
OpenAdvisories

Product · Alibaba

Fastjson

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    CVE-2026-16723 Public exploit

    Remote Code Execution in fastjson 1.2.68–1.2.83

    A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.

    Alibaba Fastjson com.alibaba:fastjson Maven