search

frohoff / ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
http://frohoff.github.io/appseccali-marshalling-pickles/
MIT License
7.77k stars 1.76k forks source link

dependecy version #174

Closed jckling closed 2 years ago

jckling commented 2 years ago 
@Dependencies({"org.aspectj:aspectjweaver:1.9.2", "commons-collections:commons-collections:3.2.2"})

aspectjweaver:1.9.5 in pom.xml and no commons-collections:3.2.2

@Dependencies ( {
    "commons-fileupload:commons-fileupload:1.3.1",
    "commons-io:commons-io:2.4"
} )

commons-io:2.6 in non-gadget dependencies

jckling commented 2 years ago

Not familiar with maven.