A few weeks ago, a very critical vulnerability allowing arbitrary remote code execution on clients and servers (and therefor even all connected clients on a server) was discovered in many Minecraft mods.
More details on the whole topic as well as a list of all currently known affected mods is available here
Quick facts
- Edition: Minecraft Java
- File type: .jar
- Minecraft versions listed: 1.17.1, 1.19.4, 1.16.5
- How to install: Install the matching mod loader (Forge, Fabric or NeoForge) for your Minecraft version. → Download the .jar. → Put it in the .minecraft/mods folder and launch that loader profile.
- Where to get it: Opens on CurseForge — not every file is mirrored on our own servers.
Install steps are the general flow for this file type — How to install Minecraft Java mods & modpacks walks through it step by step.
SerializationIsBad is a free Minecraft Java mod. Compatible with Minecraft 1.17.1, 1.19.4, 1.16.5, 1.18.2 and newer. Downloaded 7,040,815 times (via CurseForge). Download it and open it directly in the game.