[GHSA-prf8-cf2x-rhx7] fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE#7570

brodmart wants to merge 1 commit intobrodmart/advisory-improvement-7570github/advisory-database:brodmart/advisory-improvement-7570from

brodmart-GHSA-prf8-cf2x-rhx7github/advisory-database:brodmart-GHSA-prf8-cf2x-rhx7Copy head branch name to clipboard