Back to mods
SerializationIsBad project artwork

CurseForge · Minecraft mod

SerializationIsBad

A Minecraft coremod aiming to patch serious security vulnerabilities found in many different mods

Choose a version Pick your version below, then grab the matching file.

Quick answer

Which SerializationIsBad release matches 1.20.2 Forge?

Updated 2 years ago
Best match for your filters Version 1.5.2 - Hotfix for older Java versions
Game version 1.17.1, 1.9.4, 1.14.4
Loader Forge

SerializationIsBad Version 1.5.2 - Hotfix for older Java versions targets 1.17.1, 1.9.4, 1.14.4 with Forge. The project page does not say whether it belongs on the client. The project page does not say whether it belongs on the dedicated server. No extra mods listed for this file.

Where it goes

Is SerializationIsBad required on the client, server, or both?

The project page does not say whether it belongs on the client. The project page does not say whether it belongs on the dedicated server.

Client Source doesn’t say
Dedicated server Source doesn’t say
Loader for this release Forge
Required install it here Optional supported, not mandatory Not supported do not install here Source doesn’t say do not assume

The source does not explicitly classify this release as client-only or server-only.

What else does SerializationIsBad Version 1.5.2 - Hotfix for older Java versions need?

Version 1.5.2 - Hotfix for older Java versions on 1.20.2 Forge. Every mod below is checked against that same setup.

No extra mods listed for this file

This file does not list any required mods. Do not add a library just because a different file uses it.

This file does not list any required or optional mods.

Before you install it

Add SerializationIsBad without breaking your instance.

Built for SerializationIsBad Version 1.5.2 - Hotfix for older Java versions on 1.20.2 Forge. Pick another file and the loader, install side or required mods may change.

  1. 01

    Stick to this file

    Use Version 1.5.2 - Hotfix for older Java versions. It targets 1.17.1, 1.9.4, 1.14.4 with Forge; another release may have different loader, side or dependency requirements.

  2. 02

    Bring the mods it needs

    This file does not list any required mods. Do not add a library just because a different file uses it.

  3. 03

    Put it on the correct side

    The project page does not say whether it belongs on the client. The project page does not say whether it belongs on the dedicated server.

  4. 04

    Pick the file you checked

    Use the “Get this file” button beside Version 1.5.2 - Hotfix for older Java versions. It opens that exact file at the source.

About this project

What does SerializationIsBad add?

A few weeks ago, a very critical vulnerability allowing arbitrary remote code execution on clients and servers (and therefor even all connected clients on a server) was discovered in many Minecraft mods.

More details on the whole topic as well as a list of all currently known affected mods is available here

Project description from CurseForge.

Pick your setup

SerializationIsBad by Minecraft version and loader

Choose the version and loader you play, then open the matching release.

68 available setups

Showing the newest 12 of 68 game versions. Older files are in the list below.

Check the dependencies, then try the file in a copied instance before changing a world you care about.

Recent files

SerializationIsBad versions and loaders

1 of 4 releases match
Clear filters

Looking for an older file? The official CurseForge project page is in Resources.