CriticalCVSS 9.8
EPSS 5.8%
Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.