Sign in
ModsPluginsData PacksShadersResource PacksModpacks
Settings
SerializationIsBad

SerializationIsBad

A Minecraft coremod aiming to patch serious security vulnerabilities found in many different mods

19.1k
34

Compatibility

Minecraft: Java Edition

1.20–1.20.4
1.19.x
1.18.x
1.17.x
1.16.x
1.15.x
1.14.x
1.13.x
1.12.x
1.11.x
1.10.x
1.9.x
1.8.x
1.7.x
1.6.4
1.6.1–1.6.2

Platforms

Forge

Supported environments

Client-side
Server-side
Client and server

90% of ad revenue goes to creators

Support creators and Modrinth ad-free with Modrinth+

Links

Report issues View source Visit wiki

Creators

dogboy21
dogboy21 Owner

Details

Licensed MIT
Published last year
Updated 8 months ago

Version 1.5.2 - Hotfix for older Java versions

by dogboy21 on Mar 16, 2024
Download

Notable changes/fixes:

Version 1.5

by dogboy21 on Aug 29, 2023
Download

Notable changes/fixes:

  • Fixed compatibility issues with newer Fabric versions
  • Add support for patching of 3rd party ObjectInputStream implementations
  • Cache remote config locally so it can be used as a fallback in case the remote config cannot be reached on startup
  • The configuration directory is now configurable with the system property serializationisbad.configdir

Full changelog: #76

Version 1.4

by dogboy21 on Aug 10, 2023
Download

Notable changes/fixes:

  • Improved compatibility with Forge versions < 1.7 and Fabric servers
  • Fixed classloading issues in ModLauncher environments
  • Fixed classloading issues in Forge 1.7-1.12 versions when the agent is used
  • Added config option to disable the use of the remote config
  • Added patching support for SerializationUtils.deserialize

Also includes contributions from @ThatGamerBlue and @ThePixelbrain, thank you!

Full changelog: #61

Version 1.3

by dogboy21 on Jul 30, 2023
Download