On 01.08.21 16:28, Uwe Schindler wrote: > The problem is: you deprecate for removal without offering any API to replace the main pain points: > ... > - Disable damn java serialization completely JDK 9+ JVM flag / security property, see JEP 290 -Djdk.serialFilter=!* regards, michael