最新のセキュリティ情報
10月15日(木)
10月14日(水)
9月12日(土)
9月9日(水)
8月20日(木)
cve-2026-47878 - MEDIUM - Unsafe Java deserialization in DefaultExecutionContextSerializer without class allowlist
DefaultExecutionContextSerializer , used by default in Spring Batch's JDBC job repository, passes Base64-decoded bytes directly to ObjectInputStream.readObject() without an ObjectInputFilter that restricts types to a trusted class allowlist. This issue is in the same class as CVE-2020-5411 , which addressed unsafe deserialization in Jackson2ExecutionContextStringSerializer . The MongoDB backend and ResourcelessJobRepository are not affected.
1月23日(月)
php[tek] 2017: Atlanta
We are excited to announce the for the 12th edition of , the longest running community focused PHP conference. This year taking place from May 24-26 in Atlanta, GA. full schedule php[tek] 2017 There is an that has been put together for you, including: amazing schedule 4 Full-day Training Classes 8 Hands-on Workshops 40 Breakout Sessions 6 Keynotes This is all being provided by from around the world, including speakers from companies like Slack, Oracle, MongoDB, Etsy, Rackspace, IBM, Salesforce, GitLab, AOL, and much much more. 40 different speakers We sincerely look forward to seeing you in A…