Why should I never ever ever use Java serialization?

I've heard that I should never use Java serialization (Serializable/ObjectInputStream/ObjectOutputStream) because of security. What's the problem?

Apr 26, 2025 - 20:58
 0
Why should I never ever ever use Java serialization?

I've heard that I should never use Java serialization (Serializable/ObjectInputStream/ObjectOutputStream) because of security. What's the problem?