ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 10 Nov 2025 20:30:00 +0000

Type Values Removed Values Added
Description ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-11-10T20:21:56.885Z

Reserved: 2025-10-27T00:00:00.000Z

Link: CVE-2025-63617

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-11-10T21:15:39.743

Modified: 2025-11-10T21:15:39.743

Link: CVE-2025-63617

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.