By Pravesh Gupta, Senior Staff Software Engineer at LinkedIn & Pranav Mutharia, Senior Software Engineer at LinkedIn LinkedIn ...

Serialize private fields and properties. Support multiple names for a single property (for example, if a previous library version used a different name). Ignore properties with a specific name, type, ...

A newly disclosed Apache Log4j2 issue could allow attackers to bypass a deserialization allowlist and execute code remotely in narrowly defined deployments. The issue, tracked as Log4j2 #4255, affects ...

A critical unsafe deserialization vulnerability in Spring for GraphQL, tracked as CVE-2026-59285, could enable remote code execution in affected applications under specific conditions. The flaw was ...

In late 2025, Mandiant responded to a security incident involving a compromised web server running KnowledgeDeliver. KnowledgeDeliver is a Learning Management System (LMS) developed by Digital ...

This vulnerability in Wazuh’s cluster communication mechanism allows an attacker controlling a worker node to execute arbitrary code on the master node. The root cause lies in unsafe JSON ...

A critical security flaw has been disclosed in LangChain Core that could be exploited by an attacker to steal sensitive secrets and even influence large language model (LLM) responses through prompt ...

Pharmaceutical serialization practices are on the rise, progressively becoming a worldwide standard as a result of stringent regulations applied in a wide variety of markets such as the United States, ...

【免费下载链接】dubbo Dubbo 是一款高性能、轻量级的分布式服务框架，旨在解决企业应用系统中服务治理的问题。轻量级的服务框架，支持多种通信协议和服务治理。适用分布式微服务架构下的 ...

Update (September 3): This post was updated to include information about GoTokenTheft usage. In a recent investigation, Mandiant Threat Defense discovered an active ViewState deserialization attack ...

A newly disclosed insecure deserialization issue in N-able N-Central could enable remote command execution, prompting urgent mitigation steps for enterprise environments. On August 13, 2025, security ...

Deserialize Java objects and encode them in XML using the XStream library. Based in part on khai-tran's work, but rewritten from scratch to work with the new Montoya API. Serialized Java content will ...