Medium severity6.5NVD Advisory· Published Nov 10, 2025· Updated Jun 17, 2026

CVE-2025-63617

Description

ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability. This is because it uses a vulnerable version of fastjson and deserializes unsafe input data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kutangguo/Ktg Mes
cpe:2.3:a:kutangguo:ktg-mes:*:*:*:*:*:*:*:*
Range: <2025-10-08
Ktg Mes/ktg-mescpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <a484f96

Patches

Vulnerability mechanics

References

github.com/ChangeYourWay/post/blob/main/ktg-mes.mdnvdExploitThird Party Advisory
gist.github.com/ChangeYourWay/8651679a2155269bccf520fcb34fc661nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000