There's a similar set of problems with .NET and BinaryFormatter and a few other things. MS now have a security guide on using them: https://learn.microsoft.com

There's a similar set of problems with .NET and BinaryFormatter and a few other things. MS now have a security guide on using them: https://learn.microsoft.com/en-us/dotnet/standard/serialization/binaryformatter-security-guide https://learn.microsoft.com/en-us/dotnet/standard/serializat...