Alibaba Fastjson
- CVE-2026-16723 Remote Code Execution in fastjson 1.2.68–1.2.83 0.7%
- CVE-2025-70974 Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a Java class, there may be calls to certain public methods of that 0.7%