Unpatched Fastjson 1.x RCE Vulnerability Threatens Spring Boot Fat-JAR Applications

An unpatched remote code execution vulnerability in Alibaba's Fastjson 1.2.68–1.2.83 library is being actively exploited in the wild against Spring Boot applications; it requires no authentication and allows arbitrary code execution through malicious JSON payloads.

This Wire brief sits within Fusion42's coverage of Enterprise Software and Cybersecurity. Wire is Fusion42's founder-focused intelligence feed: each story is connected to the funds and startups it names — every one with a live profile on Raise or Scout — so founders can follow the capital and the momentum behind the headline rather than just the headline itself. Wire analysis is one of the live surfaces Arthur reasons over.