insecure-deserialization
Safeguard articles tagged "insecure-deserialization" — guides, analysis, and best practices for software supply chain and application security.
15 articles
Serialization vs. Deserialization in Java: Security Implications
The difference between serialization and deserialization in Java is simple to state and dangerous to get wrong — deserialization of untrusted data has caused some of the highest-severity Java CVEs of the last decade.
Serialize vs Deserialize: A Practical Comparison and Why Deserialization Is the Risky One
Serialize turns an object into bytes; deserialize turns bytes back into an object. The comparison matters for security because deserializing untrusted data in Java has caused some of the worst RCE bugs on record.
Java Deserialization Vulnerabilities: How They Work and How to Stop Them
A practical explanation of the Java deserialization vulnerability class: why untrusted object deserialization leads to remote code execution, and how to defend against it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.