In this article we discuss a recent deserialization vulnerability we found in Relution (CVE-2023-48178), a mobile device management product that is popular among multinational German corporations. CVE ...

Learn about serialization in Java with our comprehensive tutorial. We provide examples to help you understand how serialization works and how to use it. Serialization is a fundamental concept in Java ...

I'm trying to run an integration using Camel-K 1.12.0 that serializes java.time classes into json, and I'm having issues with the use of javaTimeModule. 2023-07-07 19 ...

java.lang.RuntimeException: Serialized class org.apache.dubbo.rpc.TriRpcStatus must implement java.io.Serializable Java field: private final org.apache.dubbo.rpc ...

In the realm of pharmaceuticals, there are some concerning statistics according to the Pharmaceutical Research and Manufacturers of America. One in ten medicines worldwide are presumed to be ...

Researchers from Foxglove Security have reportedly discovered a remote code execution hole in the widely used Apache Commons library, thanks to the insecure method in which Java unserializes objects, ...

More than once, I have seen code such as the following (without the comments I have added to point out flaws), in which a well-intentioned Java developer has ensured that their favorite Enum ...