Skip to content
#

fastjson2

Star

Here are 11 public repositories matching this topic...

Language: All
Filter by language
All 11 Java 10 Python 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

dinosn / fastjson-jsontype-rce-lab

Star 203

Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @jsontype resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@jsontype(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.

security spring-boot deserialization poc rce vulnerability appsec fastjson ssrf autotype jsonsubtypes security-lab fastjson2 jsontype remote-class-loading
  • Updated Jul 27, 2026
  • Python

xiaoqiMikko / fastjson-check

Star 0

fastjson vulnerability scanner - detect fastjson in JARs and Spring Boot fat-JARs, check exposure to CVE-2026-16723, and verify whether you already run the official patch 1.2.84. Zero-dependency offline CLI. fastjson 漏洞检测与排查工具：一条命令扫描依赖，支持 fat-JAR 与 shaded 依赖，并判定是否已升到官方补丁版本 1.2.84。

java security spring-boot cve appsec sca fastjson devsecops vulnerability-scanner supply-chain-security fastjson2 jar-scanner cve-2026-16723
  • Updated Aug 9, 2026
  • Java

Improve this page

Add a description, image, and links to the fastjson2 topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the fastjson2 topic, visit your repo's landing page and select "manage topics."

Learn more