com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization

A flaw was found in Google Guava. During Java object deserialization—the process of converting stored data back into active program objects—memory is eagerly allocated based on caller-specified size parameters without proper throttling or limits. An attacker can exploit this issue by providing a...