Java deserialization vulnerability is a severe threat in practice. Researchers have proposed
static analysis solutions to locate candidate vulnerabilities and fuzzing solutions to generate …

Java (de) serialization is prone to causing security-critical vulnerabilities that attackers can
invoke existing methods (gadgets) on the application's classpath to construct a gadget chain …

Nowadays, an increasing number of applications use deserialization. This technique, based
on rebuilding the instance of objects from serialized byte streams, can be dangerous since it …

Java is one of the preferred options of modern developers and has become increasingly
more prominent with the prevalence of the open-source culture. Thanks to the serialization …

Prototype pollution is a type of recently-discovered, impactful vulnerability that affects
JavaScript code. One important yet challenging research problem of prototype pollution is …

Code analysis is more important than ever because JavaScript is increasingly popular and
actively used, both on the client and server sides. Most algorithms for analyzing …

Nowadays, vulnerabilities in open source software (OSS) are constantly emerging, posing a
great threat to application security. Security patches are crucial in reducing the risk of OSS …

Untrusted deserialization exploits, where a serialised object graph is used to achieve denial-
of-service or arbitrary code execution, have become so prominent that they were introduced …

Object serialization and deserialization are widely used for storing and preserving objects in
files, memory, or database as well as for transporting them across machines, enabling …

Java Object Injection (JOI) is a severe type of vulnerability affecting Java deserialization,
which allows adversaries to inject a well-crafted, serialized object, thus triggering a series of …