Fastjson 1.2.68 finally patches the Autotype flaw. The update blocks dynamic method calls and tightens type resolution, stopping remote‑code‑execution vectors that arise from deserializing untrusted JSON. If you still run older versions, upgrade now to keep your services safe.

#Fastjson #SecurityPatch #JSONDeserialization #Infosec #OpenSource

🔗 https://www.cnblogs.com/tr1ple/p/13489260.html