Apache Commons statement to widespread Java object deserialisation vulnerability

mail-archives.apache.org