Tag
java-deserialization-vulnerability
Safeguard articles tagged "java-deserialization-vulnerability" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Security
Java Deserialization Vulnerabilities: How They Work and How to Stop Them
A practical explanation of the Java deserialization vulnerability class: why untrusted object deserialization leads to remote code execution, and how to defend against it.
Jan 28, 20256 min read
Vulnerabilities
The SnakeYAML Deserialization Vulnerability, Explained
SnakeYAML's default Constructor could instantiate arbitrary Java classes from YAML input — CVE-2022-1471 turned a config-parsing library into a remote code execution path.
Jun 19, 20245 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.