The flaw, which allowed attackers to run their own code on websites, was being exploited in wild
Source: www.itpro.co.uk and Read More

Critical Open Source Easyjson Library Under Full Control of Russian Company
Researchers revealed that easyjson, a crucial Go package for JSON serialization, is controlled by Moscow-based developers from VK Group, raising significant security concerns. This foreign