Tag

ysoserial

Safeguard articles tagged "ysoserial" — guides, analysis, and best practices for software supply chain and application security.

1 article

Application Security

Java deserialization gadget chains explained

One 2015 talk and a tool called ysoserial turned ordinary Java libraries into remote code execution chains — here's how gadget chains work and how to stop them.

Jul 13, 20266 min read