jvm-security

What problem does it solve?

JVM security risks from insecure handling of untrusted input and external services are a major threat during code review and deployment.

Core Features & Use Cases

• JNDI / Log4Shell mitigations and safe defaults for loggers to prevent remote code execution.
• Safe alternatives to dangerous Java APIs (e.g., safe serialization, JSON/Protobuf over Java serialization, XML parsing with secure configs).
• XXE prevention in XML parsing and secure parser configurations.
• SSRF and secret management best practices to avoid data leakage.
• Guidance for secure cryptography usage and defense-in-depth patterns.
• Concrete examples and real-world mitigations for typical JVM apps.

Quick Start

Inspect the Java codebase for the risk areas described and apply the recommended mitigations to untrusted input handling, serialization, XML parsing, and cryptography usage.