Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode() parameter.
Advisories for Maven/Com.glazedlists/Glazedlists package
2023