fastjson-tp1fn1

json.org CVE-2022-45688 true & false positive WTF ?? The project contains a fastjson dependency with CVE-2022-25845. The vulnerability occurs as markup in JSON is interpreted as Java beans, i.e. classes are instantiated and properties are set by executing setter methods. This is done using...