deserialization

Everything AppSec Scoop has reported about deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.

Amazon Neptune graph import flaw risks credential theft

A critical deserialization bug in Amazon Neptune allows authenticated users to execute arbitrary code and steal internal service credentials.

Oct 15, 2026

A critical vulnerability in the Let's Play plugin allows object injection, affecting versions up to 1.1.15 with a CVSS score of 9.8.

Oct 11, 2026