Skip to content

Vulnerabilities of Apache Software Foundation Apache Fory

Is your version affected?

CVE Summary Score Published
CVE-2026-71559 Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a… Not rated Aug 7, 2026
CVE-2026-71558 Heap type confusion vulnerability in Apache Fory C++ deserialization Not rated Aug 7, 2026
CVE-2026-71560 Out-of-bounds Read vulnerability in Apache Fory C++ deserialization Not rated Aug 7, 2026
CVE-2026-60080 Use After Free vulnerability in the Rust deserialization logic of Apache Fory Not rated Jul 21, 2026
CVE-2026-64606 Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java… Not rated Jul 21, 2026
CVE-2026-64609 Out-of-bounds read via sun.misc.Unsafe in Apache Fory Not rated Jul 21, 2026
CVE-2026-64608 Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation Not rated Jul 21, 2026
CVE-2026-50076 Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK before 1.1.0 on… Not rated Jun 4, 2026
CVE-2026-48207 Deserialization of untrusted data in Apache Fory PyFory Not rated May 21, 2026
CVE-2025-61622 Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions… Not rated Oct 1, 2025
CVE-2025-59328 A vulnerability in Apache Fory allows a remote attacker to cause a Denial of Service (DoS) Not rated Sep 15, 2025

Other Apache Software Foundation products