Your Java application just got pwned. An attacker sent a crafted JSON payload, your deserialization code helpfully executed it, and…