alibaba/fastjson2

alibaba/fastjson2

Releases241
Frequency3 weeks 11 hours
Last Release
Stars4.34K
🚄 FASTJSON2 is a Java JSON library with excellent performance.

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
9 CRITICAL

A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.