com.alibaba:fastjson vulnerabilities (Maven)

4 vulnerabilities.

• com.alibaba:fastjson Maven Remote Code Execution in fastjson 1.2.68–1.2.83 CVE-2026-16723 Public exploit 9.0 CriticalJuly 23, 2026
• com.alibaba:fastjson Maven FASTJSON Includes Functionality from Untrusted Control Sphere CVE-2025-70974 Fix available 10.0 CriticalJanuary 9, 2026
• com.alibaba:fastjson Maven Deserialization of Untrusted Data CVE-2022-25845 Public exploitFix available EPSS 18.7% 8.1 HighJune 10, 2022
• com.alibaba:fastjson Maven Improper Input Validation in alilibaba:fastjson CVE-2017-18349 Public exploitFix available EPSS 38.8% 9.8 CriticalOctober 23, 2018