fastjson-jsontype-rce-lab
> DevOpsDocker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONTyp
206 stars0 likes2 views
About
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONTyp
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.
Issues· 0 open
No open issues yet, or sync has not completed.
> Tags
appsecdeserializationfastjson
> Details
PublishedSep 9, 2026
UpdatedSep 17, 2026
CategoryDevOps
PricingFree