Tag

#java

2 stories tagged java.

Bar chart of Fastjson 1.x RCE exploitation growth from 0 detected attacks in June 2026 to over 800 per day by July 25, 2026. Source: ThreatBook and Imperva telemetry.

Fastjson 1.x RCE has no patch and Spring Boot apps are exposed

Fastjson 1.x RCE (CVE-2026-16723) is a critical CVSS 9.0 flaw actively exploited in Spring Boot apps with no official patch available. Block Fastjson 1.x endpoints, migrate to Jackson, and demand autotype safelists.

Lars Cornelissen · Jul 27, 2026

Spring AI 2.0 release work by GitHub release-note count: 5 new features, 5 bug fixes, 4 documentation updates, and 2 dependency upgrades.

Engineering

Spring AI 2.0 gives Java agents a sturdier app stack

Spring AI 2.0 is a sturdier Java AI stack: Boot 4.1, MCP, unified tool loops, and 4 Cosmos DB modules now matter for agents.

Lars Cornelissen · Jun 30, 2026