Immersive Paintings [Fabric/Forge]

8M DownloadsUpdated 6 months agoCreated 3 years ago

Arbitrary Code Execution Vulnerability

ryleu opened this issue 2 years ago · 0 comments

ryleu commented 2 years ago

The vulnerability is caused by an unsafe use of the Java serialization feature in network packets sent by servers to clients or clients to servers that allows to instantiate any Java class that is loaded in the Minecraft instance.

This mod is completely unsafe and should not be used until this issue is patched.