CVE-2021-37632

CVE-2021-37632 affects SuperMartijn642's Config Lib (versions 1.0.4–1.0.8) used by Minecraft mods. The flaw arises when servers send a packet containing config values and the client reads data with ObjectInputStream.readObject(), which can instantiate arbitrary classes from unvalidated input, pot...