google / gson

A Java serialization/deserialization library to convert Java Objects into JSON and back

apache / fory

A blazingly fast multi-language serialization framework for idiomatic domain objects, schema IDL, and cross-language data exchange.

alibaba / fastjson2

🚄 FASTJSON2 is a Java JSON library with excellent performance.

apache / avro

Apache Avro is a data serialization system.

OpenHFT / Chronicle-Wire

A Low Garbage Java Serialisation Library that supports multiple formats

dinosn / log4j-4255

End-to-end Docker lab reproducing Apache log4j2 #4255 — FilteredObjectInputStream allowlist bypass via java.rmi.MarshalledObject (unfiltered deserialization → RCE) on Log4j 2.26.1 / JDK 17.