deserialization

Everything Patch Gazette has reported about deserialization: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

QuantumCloud Conversational Forms CVSS 9.8 Flaw Enables Object Injection in Versions Up to 1.5.1

A critical deserialization vulnerability in QuantumCloud’s Conversational Forms for ChatBot allows object injection in all versions through 1.5.1.

Oct 18, 2026

Vulnerabilities

EspoCRM 9.3.7 Patch Fixes Critical Remote Code Execution Flaw

EspoCRM releases version 9.3.7 to address a critical vulnerability allowing authenticated administrators to execute arbitrary code via unsafe deserialization.

Oct 15, 2026