Skip to content

Issues: alibaba/fastjson

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
0 Open 1,681 Closed
0 Open 1,681 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

A Misnomer
#1460 by Richard-Cao was closed Sep 10, 2017
7 👍 17
这个项目已经到头了 question
#3249 by lewe518 was closed Jun 14, 2020
6 👍 17
Hi fastjson
#3192 by cyjaysun was closed Jun 1, 2020
2 👍 13
发现最新版本1.2.67依然可以通过dnslog判断后端是否使用fastjson
#3077 by c0ny1 was closed Mar 28, 2020 1.2.68
16 👍 9
Fastjson新版本解析到特定字符后直接触发异常
#2689 by yeweichen was closed Sep 6, 2019
6 👍 6
为啥不默认就【开 safeMode 关 autoType】，留点小尾巴，可以时不时增加曝光度？
#3199 by MoonLord-LM was closed Jun 1, 2020
6 👍 6
每隔几个月就曝一次安全漏洞,很心累
#3203 by treeleafj was closed Jun 1, 2020
2 👍 5
反序列化建议
#892 by ifeikong was closed Nov 16, 2016
2 👍 4
不要个碧莲了 修复漏洞不公告留后门？ 大家别用了
#3189 by fackjson was closed Jun 1, 2020
6 👍 4
1.2.71版本升级导致json的key变的大小写敏感 bug
#3312 by colin-lee was closed Jul 26, 2020 1.2.73
3 👍 4
v1.2.40 反序列化float field，当field精度超过float的精度范围，结果出现负数 bug
#1723 by KaneWu0 was closed Mar 15, 2018 1.2.47
2 👍 3
1.2.47 当@JSONType 中指定了typeKey, 反序列化时会丢失此typeKey之前的所有字段 bug
#1941 by lazydan was closed Mar 24, 2019 1.2.51
4 👍 3
com.alibaba.fastjson.JSONException: create asm serializer error, verson 1.2.62
#2976 by littleus was closed Jan 17, 2020
1 👍 3
出一个去掉 autoType 的版本吧
#2759 by xbzbing was closed Mar 26, 2020
13 👍 3
为什么一个序列化库三天两头的就爆远程执行漏洞?
#3244 by pkaq was closed Jun 8, 2020
4 👍 3
解析对象时，把字段名改了，bool类型的变量名前面的is自动去掉了
#278 by qicosmos was closed Apr 12, 2016
28 👍 2
json转为Map时 指定泛型无效以及带来的一些问题
#436 by zhugw was closed Oct 30, 2015
2 👍 2
parser/deserializer/ThrowableDeserializer.java 里 deserialze() 可疑的空指针解引用 bug
#1613 by viennadd was closed Dec 14, 2017 1.2.42
3 👍 2
FastJsonHttpMessageConverter对返回字符串多加一个双引号的问题 question
#1545 by helloworldtang was closed Jul 30, 2019
14 👍 2
Feature.InitStringFieldAsEmpty 参数问题 bug
#2387 by tungSing was closed Jul 31, 2019 1.2.58
1 👍 2
android版本不支持注解JSONField#deserializeUsing
#2980 by JiangBinbin1990 was closed Nov 9, 2022
2 👍 2
1.2.61不兼容1.2.60以前的方法JavaBeanSerializer.processValue
#2790 by calvinit was closed Oct 3, 2019 1.2.62
7 👍 2
预留反序列化的可扩展处理器
#3072 by leizhiyuan was closed Mar 28, 2020 1.2.68
@wenshao
2 👍 2
charsLocal内存强引用，线程池模式下会导致内存浪费
#3751 by jizhuozhi was closed Feb 21, 2023
8 👍 2
1.2.83版本是否还能够利用dnslog进行探测到存在反序列化漏洞
#4327 by syroot00ls was closed Dec 31, 2022
6 👍 2
ProTip! Add no:assignee to see everything that’s not assigned.