{"action":"Upgrade com.alibaba:fastjson to 1.2.83 or later.","affected":[{"fixed":"1.2.83","introduced":"1.2.25"}],"component":"com.alibaba:fastjson","cve_ids":["CVE-2022-25845"],"ecosystem":"Maven","epss":0.18743,"exploited":false,"fixed_versions":["1.2.83"],"ghsa_id":"GHSA-pv7h-hx5h-mgfj","id":"tcs_01M5N981MGYBF18KD57MW2PSFD","modified_at":"2026-07-08T06:50:00.981496469Z","published_at":"2022-06-11T00:00:17Z","references":["https://osv.dev/vulnerability/GHSA-pv7h-hx5h-mgfj","https://nvd.nist.gov/vuln/detail/CVE-2022-25845","https://github.com/alibaba/fastjson/commit/35db4adad70c32089542f23c272def1ad920a60d","https://github.com/alibaba/fastjson/commit/8f3410f81cbd437f7c459f8868445d50ad301f15","https://github.com/alibaba/fastjson","https://github.com/alibaba/fastjson/releases/tag/1.2.83","https://github.com/alibaba/fastjson/wiki/security_update_20220523","https://snyk.io/vuln/SNYK-JAVA-COMALIBABA-2859222","https://www.ddosi.org/fastjson-poc","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-pv7h-hx5h-mgfj","url":"https://osv.dev/vulnerability/GHSA-pv7h-hx5h-mgfj"}],"summary":"Unsafe deserialization in com.alibaba:fastjson"}