News for hackers. Stuff that matters.

A comment on A Technical Analysis of How Spring4Shell (CVE-2022-22965) Works.

Re:A Technical Analysis of How Spring4Shell (CVE-2022-22965)... by alipitch on Wednesday April 13, 2022 @01:29AM (#31011483)
Are there any data binding libraries (deserialization, marshaling, pickling libraries) that do not have the class of weaknesses as the two CVEs (CVE-2022-22965, CVE-2010-1622)?

If there are any for Java, can they be used with Spring Boot (Spring Framework)? Maybe there are some for in another programming language?

[ Parent | on HN ]

There are no comments on this comment yet.