Skip to content

2025-07-16-unsafe-deserialization-sinks-deprecation.md

Latest commit

 

History

History
8 lines (8 loc) · 934 Bytes

2025-07-16-unsafe-deserialization-sinks-deprecation.md

File metadata and controls

8 lines (8 loc) · 934 Bytes
category deprecated
  • The module semmle.code.java.frameworks.Castor has been deprecated and will be removed in a future release, including its two classes CastorUnmarshaller and CastorUnmarshalMethod.
  • The module semmle.code.java.frameworks.JYaml has been deprecated and will be removed in a future release, including its two classes JYamlLoader and JYamlLoaderUnsafeLoadMethod.
  • The classes UnsafeHessianInputReadObjectMethod and BurlapInputReadObjectMethod in the module semmle.code.java.frameworks.HessianBurlap have been deprecated and will be removed in a future release.
  • The class YamlBeansReaderReadMethod in the module semmle.code.java.frameworks.YamlBeans has been deprecated and will be removed in a future release.
  • The class MethodApacheSerializationUtilsDeserialize in the module semmle.code.java.frameworks.apache.Lang has been deprecated and will be removed in a future release.