Vulnerabilities in Alibaba

5 results

CVE-2021-29441HIGHAuthentication bypassEPSS 83.2%CVE-2021-29442HIGHAuthentication bypassEPSS 64.2%CVE-2025-70974CRITICALFastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a JavaEPSS 0.7%CVE-2026-16723CRITICALRemote Code Execution in fastjson 1.2.68–1.2.83EPSS 0.7%CVE-2026-9680MEDIUMMCP Server Exposure via Insecure Default Binding on alibabacloud-rds-openapi-mcp-serverEPSS 0.4%