Skip to content
OpenAdvisories

Package · Maven

org.hyperledger.fabric-sdk-java:fabric-sdk-java

1 known vulnerabilities.

1 result · Feed

  • Critical 9.3

    ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

    Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. From versions 1.0.0 to 2.2.26, Channel.java implements readObject() and exposes deSerializeChannel() which call ObjectInputStream.re…