OpenJDK: unbounded memory allocation in PredicatedNodeTest deserialization (JAXP, 8181327)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

Node.js suffers from a deserialization remote code execution vulnerability

Node.js is a Javascript runtime. It is actually a wrapper around the Google V8 engine. In fact, it is the Google V8 engine package . Node.js is a platform based on the Chrome JavaScript runtime built for easy to build responsive , easy to extend the web application . A deserialization remote code...