CurseForge · Minecraft mod
SerializationIsBad
A Minecraft coremod aiming to patch serious security vulnerabilities found in many different mods
Quick answer
Which SerializationIsBad release matches 1.20.2 Forge?
SerializationIsBad Version 1.5.2 - Hotfix for older Java versions targets 1.17.1, 1.9.4, 1.14.4 with Forge. The project page does not say whether it belongs on the client. The project page does not say whether it belongs on the dedicated server. No extra mods listed for this file.
Where it goes
Is SerializationIsBad required on the client, server, or both?
The project page does not say whether it belongs on the client. The project page does not say whether it belongs on the dedicated server.
The source does not explicitly classify this release as client-only or server-only.
What else does SerializationIsBad Version 1.5.2 - Hotfix for older Java versions need?
Version 1.5.2 - Hotfix for older Java versions on 1.20.2 Forge. Every mod below is checked against that same setup.
This file does not list any required mods. Do not add a library just because a different file uses it.
This file does not list any required or optional mods.
Before you install it
Add SerializationIsBad without breaking your instance.
Built for SerializationIsBad Version 1.5.2 - Hotfix for older Java versions on 1.20.2 Forge. Pick another file and the loader, install side or required mods may change.
- 01
Stick to this file
Use Version 1.5.2 - Hotfix for older Java versions. It targets 1.17.1, 1.9.4, 1.14.4 with Forge; another release may have different loader, side or dependency requirements.
- 02
Bring the mods it needs
This file does not list any required mods. Do not add a library just because a different file uses it.
- 03
Put it on the correct side
The project page does not say whether it belongs on the client. The project page does not say whether it belongs on the dedicated server.
- 04
Pick the file you checked
Use the “Get this file” button beside Version 1.5.2 - Hotfix for older Java versions. It opens that exact file at the source.
About this project
What does SerializationIsBad add?
A few weeks ago, a very critical vulnerability allowing arbitrary remote code execution on clients and servers (and therefor even all connected clients on a server) was discovered in many Minecraft mods.
More details on the whole topic as well as a list of all currently known affected mods is available here
Project description from CurseForge.
Pick your setup
SerializationIsBad by Minecraft version and loader
Choose the version and loader you play, then open the matching release.
1.20.3
1 loader build1.20.2
1 loader build1.20.1
1 loader build1.20
1 loader build1.19.4
1 loader build1.19.3
1 loader build1.19.2
1 loader build1.19.1
1 loader build1.19
1 loader build1.18.2
1 loader build1.18.1
1 loader buildShowing the newest 12 of 68 game versions. Older files are in the list below.
Check the dependencies, then try the file in a copied instance before changing a world you care about.
Recent files
SerializationIsBad versions and loaders
Version 1.5.2 - Hotfix for older Java versions
serializationisbad-1.5.2.jar
16 Mar 2024
Looking for an older file? The official CurseForge project page is in Resources.