Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/CWEs/CWE-502
Common Weakness Enumeration

CWE-502: Deserialization of Untrusted Data

ShareXLinkedInRedditHN

The product deserializes attacker-controllable data without constraints, commonly yielding code execution.

Abstraction
Base
OWASP Top 10
A08:2021 (#8)
Exploit Likelihood
High
Related CVEs
67

How to mitigate

Never deserialize untrusted input with native serializers; use data-only formats with schema validation.

▪ References & documentation

https://cwe.mitre.org/data/definitions/502.htmlNVD CWE listing

▪ Related CVEs

CVE-2025-54920High

Security vulnerability in spark

CVE-2025-54920High

Security vulnerability in spark

CVE-2025-54920High

Security vulnerability in spark

CVE-2021-42392Critical

Security vulnerability in h2

CVE-2022-23307High

Security vulnerability in chainsaw

CVE-2020-9493Critical

Security vulnerability in chainsaw

CVE-2026-23737High

Security vulnerability in seroval

CVE-2019-19373High

Security vulnerability in Matrix

CVE-2026-34993Medium

Security vulnerability in aiohttp

CVE-2024-11949High

Security vulnerability in archiver

CVE-2024-11947High

Security vulnerability in archiver

CVE-2022-42003High

Security vulnerability in jackson-databind

CVE-2020-10650High

Security vulnerability in jackson-databind

CVE-2019-12086High

Security vulnerability in jackson-databind

CVE-2019-12384Medium

Security vulnerability in jackson-databind

CVE-2019-20330Critical

Security vulnerability in jackson-databind

CVE-2020-35490High

Security vulnerability in jackson-databind

CVE-2020-35728High

Security vulnerability in jackson-databind

CVE-2020-36180High

Security vulnerability in jackson-databind

CVE-2020-36181High

Security vulnerability in jackson-databind

CVE-2020-36183High

Security vulnerability in jackson-databind

CVE-2020-36184High

Security vulnerability in jackson-databind

CVE-2020-36185High

Security vulnerability in jackson-databind

CVE-2020-36187High

Security vulnerability in jackson-databind

CVE-2020-10969High

Security vulnerability in jackson-databind

CVE-2020-11619High

Security vulnerability in jackson-databind

CVE-2020-14060High

Security vulnerability in jackson-databind

CVE-2020-14062High

Security vulnerability in jackson-databind

CVE-2020-14195High

Security vulnerability in jackson-databind

CVE-2020-9546Critical

Security vulnerability in jackson-databind

CVE-2018-12023High

Security vulnerability in jackson-databind

CVE-2020-11113High

Security vulnerability in jackson-databind

CVE-2020-11620High

Security vulnerability in jackson-databind

CVE-2020-14061High

Security vulnerability in jackson-databind

CVE-2018-14720Critical

Security vulnerability in jackson-databind

CVE-2018-19360Critical

Security vulnerability in jackson-databind

CVE-2018-19361Critical

Security vulnerability in jackson-databind

CVE-2019-14439High

Security vulnerability in jackson-databind

CVE-2019-14540Critical

Security vulnerability in jackson-databind

CVE-2019-16943Critical

Security vulnerability in jackson-databind

CVE-2019-17531Critical

Security vulnerability in jackson-databind

CVE-2021-20190High

Security vulnerability in jackson-databind

CVE-2020-36182High

Security vulnerability in jackson-databind

CVE-2020-36188High

Security vulnerability in jackson-databind

CVE-2020-9548Critical

Security vulnerability in jackson-databind

CVE-2018-11307Critical

Security vulnerability in jackson-databind

CVE-2018-14718Critical

Security vulnerability in jackson-databind

CVE-2019-12814Medium

Security vulnerability in jackson-databind

CVE-2020-24750High

Security vulnerability in jackson-databind

CVE-2020-36186High

Security vulnerability in jackson-databind

CVE-2020-8840Critical

Security vulnerability in jackson-databind

CVE-2020-9547Critical

Security vulnerability in jackson-databind

CVE-2018-14719Critical

Security vulnerability in jackson-databind

CVE-2018-19362Critical

Security vulnerability in jackson-databind

CVE-2019-16942Critical

Security vulnerability in jackson-databind

CVE-2020-24616High

Security vulnerability in jackson-databind

CVE-2020-35491High

Security vulnerability in jackson-databind

CVE-2020-36179High

Security vulnerability in jackson-databind

CVE-2020-10968High

Security vulnerability in jackson-databind

CVE-2020-11111High

Security vulnerability in jackson-databind

CVE-2020-11112High

Security vulnerability in jackson-databind

CVE-2017-17485Critical

Security vulnerability in jackson-databind

CVE-2022-42004High

Security vulnerability in jackson-databind

CVE-2019-16335Critical

Security vulnerability in jackson-databind

CVE-2019-17267Critical

Security vulnerability in jackson-databind

CVE-2020-36189High

Security vulnerability in jackson-databind

CVE-2018-12022High

Security vulnerability in jackson-databind