dinosn/fastjson-jsontype-rce-lab
Can I trust it?
Worth a closer look before you use it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active Check
Last change 86 days ago.
Licence OK
MIT: you can use it for free, also in a commercial product. Keep the licence notice.
Quick checks from public data. They help, but they are no guarantee.
From the GitHub description
Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) / Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.
We haven't written this repo up yet. It gets a summary once it enters the radar's top.
How to use it
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up dinosn/fastjson-jsontype-rce-lab in my project. Follow its README: https://github.com/dinosn/fastjson-jsontype-rce-lab. Explain each step and check it is safe before running anything.
Star curve
Get alerts for repos like this
We'll email you when repos like this start rising. Free, once a week, only what matches.
18,966 GitHub repos watched and ranked every hour. Figures as of 22 October 2026.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/dinosn/fastjson-jsontype-rce-lab?ref=badge)