ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.ylyue:yue-library-auth-client (>=j8.2.2.0, <=2.1.0) +10409 more potentially affected by CVE-2026-16723 via com.alibaba:fastjson (>=1.2.68, <=1.2.83_noneautotype)

com.alibaba:fastjson MAVEN version =1.2.68, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.0, =1.0.6, =1.0.7 and more Source cves: CVE-2026-16723 Source advisory: SNYK:JAVA-COMALIBABA-18296111...

ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.ylyue:yue-library-auth-client (>=j8.2.2.0, <=2.1.0) +10197 more potentially affected by CVE-2026-16723 via com.alibaba:fastjson (>=1.2.68, <=1.2.83)

com.alibaba:fastjson MAVEN version =1.2.68, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.0, =1.0.6, =1.0.7 and more Source cves: CVE-2026-16723 Source advisory: GHSA-CRF3-V9RR-V7HJ...

ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.ylyue:yue-library-auth-client (>=j8.2.2.0, <=2.1.0) +10197 more potentially affected by CVE-2026-16723 via com.alibaba:fastjson (>=1.2.68, <=1.2.83)

com.alibaba:fastjson MAVEN version =1.2.68, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.0, =1.0.6, =1.0.7 and more Source cves: CVE-2026-16723 Source advisory: OSV:GHSA-CRF3-V9RR-V7HJ...

ai.foxpay.api:foxpay-sdk (>=1.0, <=1.1), ai.ylyue:yue-library-auth-client (>=j8.2.2.0, <=2.1.0) +10423 more potentially affected by CVE-2026-16723 via com.alibaba:fastjson (>=1.2.68, <=1.2.84)

com.alibaba:fastjson MAVEN version =1.2.68, =1.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =j8.2.2.0, =1.0.0, =1.0.6, =1.0.7 and more Source cves: CVE-2026-16723 Source advisory: MEND:CVE-2026-16723...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +4128 more potentially affected by CVE-2025-70974 via com.alibaba:fastjson (>=1.1.15, <=1.2.47)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.3.0, =3.0.0, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2025-70974 Source advisory: GHSA-JM7W-5684-PVH8...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +4128 more potentially affected by CVE-2025-70974 via com.alibaba:fastjson (>=1.1.15, <=1.2.47)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.3.0, =3.0.0, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2025-70974 Source advisory: OSV:GHSA-JM7W-5684-PVH8...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +4128 more potentially affected by CVE-2025-70974 via com.alibaba:fastjson (>=1.1.15, <=1.2.47)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.3.0, =3.0.0, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2025-70974 Source advisory: SNYK:JAVA-COMALIBABA-14908847...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +4128 more potentially affected by CVE-2025-70974 via com.alibaba:fastjson (>=1.1.15, <=1.2.47)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.3.0, =3.0.0, =1.0.0, =1.0.1, =1.0.2 and more Source cves: CVE-2025-70974 Source advisory: MEND:CVE-2025-70974...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +11552 more potentially affected by CVE-2022-25845 via com.alibaba:fastjson (>=1.2.25, <=1.2.80)

com.alibaba:fastjson MAVEN version =1.2.25, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.1.1, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr2.sr1, =2.1.0 and more Source cves: CVE-2022-25845 Source advisory: GHSA-PV7H-HX5H-MGF...

GHSA-PV7H-HX5H-MGFJ Unsafe deserialization in com.alibaba:fastjson

The package com.alibaba:fastjson before 1.2.83 is vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not...

CVE-2022-25845

The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +11552 more potentially affected by CVE-2022-25845 via com.alibaba:fastjson (>=1.2.25, <=1.2.80)

com.alibaba:fastjson MAVEN version =1.2.25, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.1.1, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr2.sr1, =2.1.0 and more Source cves: CVE-2022-25845 Source advisory: MEND:CVE-2022-2584...

CVE-2022-25845

The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote servers. Workaround: If upgrading is not...

CVE-2022-25845

CVE-2022-25845 affects Alibaba Fastjson prior to 1.2.83. The root cause is a bypass of the default autoType shutdown restrictions during deserialization of untrusted data, allowing attacker-controlled payloads to trigger deserialization. The impact is described as remote attack potential on vulne...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +12847 more potentially affected by CVE-2022-25845 via com.alibaba:fastjson (>=1.1.15, <=1.2.80)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.1.1, =j8.2.2.0, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr4, =j8.2.2.0, =finchley.sr2.sr1, =finchley.sr2.sr1, =2.1.0 and more Source cves: CVE-2022-25845 Source advisory:...

ai.mattmann.mnemosyne:cas-product (>=1.11.0, <=1.13.8), ai.mattmann.mnemosyne:pcs-services (>=1.12.0, <=1.13.8) +843 more potentially affected by CVE-2017-5656 via org.apache.cxf:cxf-core (>=3.1.0, <=3.1.10)

org.apache.cxf:cxf-core MAVEN version =3.1.0, =1.11.0, =1.12.0, =1.2.18, =6.2.0.5, =6.2.0.6, =1.0.0, =3.13, =1.0.0, =1.0.4 and more Source cves: CVE-2017-5656 Source advisory: GHSA-V936-X3J5-C76J...

ai.mattmann.mnemosyne:cas-product (>=1.11.0, <=1.13.8), ai.mattmann.mnemosyne:pcs-services (>=1.12.0, <=1.13.8) +843 more potentially affected by CVE-2017-5656 via org.apache.cxf:cxf-core (>=3.1.0, <=3.1.10)

org.apache.cxf:cxf-core MAVEN version =3.1.0, =1.11.0, =1.12.0, =1.2.18, =6.2.0.5, =6.2.0.6, =1.0.0, =3.13, =1.0.0, =1.0.4 and more Source cves: CVE-2017-5656 Source advisory: OSV:GHSA-V936-X3J5-C76J...

ai.houyi:dorado (>=0.0.1, <=0.0.8), ai.houyi:dorado-core (>=0.0.11, <=0.0.51) +7696 more potentially affected by unknown CVE via com.alibaba:fastjson (>=1.1.15, <=1.2.68)

com.alibaba:fastjson MAVEN version =1.1.15, =0.0.1, =0.0.11, =0.0.16, =0.0.1, =0.0.14, =0.0.47, =0.0.14, =0.1.1, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =2.0.1.release, =2.0.1.release, =2.1.10.release and more Source cves: unknown CVE Source advisory...

cc.kebei:onion-easy-orm (3.0.0), cc.kebei:onion-easy-orm-core (3.0.0) +1972 more potentially affected by CVE-2017-18349 via com.alibaba:fastjson (>=1.1.15, <=1.2.30)

com.alibaba:fastjson MAVEN version =1.1.15, =1.1.6, =1.0.0, =1.0, =1.0.0, =1.0.0, =6.1.7, =6.2.08, =6.1.0, =6.1.7, =6.1.0, =6.2.09 and more Source cves: CVE-2017-18349 Source advisory: MEND:CVE-2017-18349...