Threats affecting pkg:maven/changmingxie/tcc-transaction

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-9497changmingxie tcc-transaction · Deserialization Medium5.3EPSS 0.3%2026-05-25CVE Database V5CVE-2026-9497 CVE-2026-9497 is a medium severity deserialization vulnerability in changmingxie tcc-transaction versions 2.0 and 2.1.0. It arises from unsafe use of Fastjson.parseObject in the Fastjson AutoType REST API component, enabling remote attackers to perform deserialization attacks. No official patch or remediation guidance is currently available from the vendor. EPSS 0.3%Vulnerability	CVE Database V5	2026-05-25

Page 1 of 1