Tag: spring boot

Java deserialization bug in Fastjson draws active exploits with no fix ready

Alibaba's Fastjson 1.x library carries a critical deserialization flaw that attackers are exploiting in Spring Boot applications.