=== process execution ===
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/task/ReportExecTask.java:171:         Process proc = Runtime.getRuntime().exec(preparedCommand, null, currentConfig.directory);
=== unsafe deserialization ===
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/domain/service/psd2/Psd2CertificateRoleExtractor.java:71:            var2 = (DEROctetString)inputStream.readObject();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/domain/service/psd2/Psd2CertificateRoleExtractor.java:95:            var2 = (ASN1Sequence)inputStream.readObject();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v2/XMLFileDigesterProviderV2.java:3:import com.airlock.iam.plugin.framework.infrastructure.xstream.XStreamHelper;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v2/XMLFileDigesterProviderV2.java:11:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v2/XMLFileDigesterProviderV2.java:14:   public XStream createDigester() {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v2/XMLFileDigesterProviderV2.java:15:      XStream xStream = XStreamHelper.createXStream(Attribute.class, Command.class, Commands.class, TokenList.class, UserInformation.class, XMLInfo.class);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/infrastructure/serialization/StateMachineContextSerializer.java:58:         var4 = (StateMachineContext)createKryo().readObject(input, DefaultStateMachineContext.class);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v2/XmlFileImporterV2.java:14:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v2/XmlFileImporterV2.java:31:      XStream digester = new XMLFileDigesterProviderV2().createDigester();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/ExpertModeRedisStateRepositoryConfig.java:124:      protected abstract String getYaml(PluginConfiguration var1, ConfigurationEnvironment var2, ConfigurationContext var3) throws PropertyTypeMismatchException;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/ExpertModeRedisStateRepositoryConfig.java:127:         String yamlConfig = this.getYaml(config, env, context);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/ExpertModeRedisStateRepositoryConfig.java:230:      protected String getYaml(PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context) throws PropertyTypeMismatchException {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v1/XMLFileDigesterProviderV1.java:4:import com.airlock.iam.plugin.framework.infrastructure.xstream.XStreamHelper;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v1/XMLFileDigesterProviderV1.java:10:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v1/XMLFileDigesterProviderV1.java:19:   public XStream createDigester() {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v1/XMLFileDigesterProviderV1.java:20:      XStream xStream = XStreamHelper.createXStream(Attribute.class, Command.class, TokenList.class, UserInformation.class, XMLInfo.class);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v1/XmlFileImporterV1.java:12:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/domain/model/task/xmlimporter/v1/XmlFileImporterV1.java:27:      XStream digester = new XMLFileDigesterProviderV1().createDigester();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/security/certificate/AsymmetricKeyPairUtils.java:147:                  if ((pemObject = pemParser.readObject()) == null) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:9:import com.airlock.iam.plugin.framework.infrastructure.io.XStreamConfigReader;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:10:import com.airlock.iam.plugin.framework.infrastructure.io.XStreamConfigWriter;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:14:import com.airlock.iam.plugin.framework.infrastructure.xstream.MedusaConfigXStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:16:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:19:   private final XStream xStream = new MedusaConfigXStream();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:33:   public XStreamConfigReader createXMLConfigReader() {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:34:      return new XStreamConfigReader(this.xStream);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:49:   public XStreamConfigWriter createXMLConfigWriter() {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/factory/PluginFrameworkFactory.java:50:      return new XStreamConfigWriter(this.xStream);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/XStreamHelper.java:3:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/XStreamHelper.java:12:public final class XStreamHelper {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/XStreamHelper.java:13:   public static XStream createXStream(Class<?>... allowedTypes) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/XStreamHelper.java:14:      XStream xStream = new XStream(new PureJavaReflectionProvider());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/XStreamHelper.java:60:   private XStreamHelper() {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:26:      XStreamHelper.forcefullyWriteAttribute(writer, "name", property.getName());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:27:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "envid", property.getEnvId());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:28:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "context", property.getContext());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:29:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "var", property.getVariable());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:39:      XStreamHelper.ensureInNode(this.tagName(), reader);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:40:      String name = XStreamHelper.readMandatoryAttribute(reader, "name");
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:41:      Optional<String> envid = XStreamHelper.readOptionalAttribute(reader, "envid");
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:42:      Optional<String> context = XStreamHelper.readOptionalAttribute(reader, "context");
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/AbstractPropertyConverter.java:43:      Optional<String> variable = XStreamHelper.readOptionalAttribute(reader, "var");
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/MedusaConfigXStream.java:10:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/MedusaConfigXStream.java:16:public class MedusaConfigXStream extends XStream {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/MedusaConfigXStream.java:17:   public MedusaConfigXStream() {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/HistoryItemConverter.java:29:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "author", item.getAuthor());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/HistoryItemConverter.java:30:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "comment", item.getDescription());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/HistoryItemConverter.java:42:      XStreamHelper.ensureInNode("configHistoryMetaDataItem", reader);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginConverter.java:47:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "class", plugin.getType());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginConverter.java:48:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "id", plugin.getName());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginConverter.java:49:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "uuid", plugin.getUuid());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginConverter.java:50:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "ref", plugin.getTemplate());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginConverter.java:51:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "uuidref", plugin.getUuidRef());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginConverter.java:52:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "comment", plugin.getComment());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginConverter.java:62:      XStreamHelper.ensureInNode("plugin", reader);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/MedusaConfigurationElementConverter.java:41:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "medusa-version", config.getIamVersion());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/MedusaConfigurationElementConverter.java:63:      XStreamHelper.ensureInNode("medusaConfiguration", reader);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/PluginMapPropertyConverter.java:33:         String key = XStreamHelper.readMandatoryAttribute(reader, "key");
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/xstream/SimplePropertyConverter.java:34:      XStreamHelper.writeAttributeIfValueIsPresent(writer, "secureExternalStorageId", property.getSecureExternalStorageId());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigWriter.java:5:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigWriter.java:6:import com.thoughtworks.xstream.XStreamException;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigWriter.java:14:public class XStreamConfigWriter implements ConfigWriter {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigWriter.java:15:   private final XStream xStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigWriter.java:17:   public XStreamConfigWriter(XStream xStream) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigWriter.java:37:      } catch (XStreamException e) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/configeditor/ui/DownloadConfigurationResource.java:43:            .saveConfiguration(this.useYaml() ? ConfigFormat.YAML_FORMAT : ConfigFormat.XML_FORMAT, bos, this.translationFilters.get());
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/configeditor/ui/DownloadConfigurationResource.java:71:      return this.useYaml() ? "application/yaml" : "text/xml";
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/configeditor/ui/DownloadConfigurationResource.java:74:   private boolean useYaml() {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java:35:import com.airlock.iam.plugin.framework.infrastructure.xstream.XStreamHelper;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java:37:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java:306:      XStream xStream = XStreamHelper.createXStream(new Class[]{SwissphoneSmsGateway.Portal.class, SwissphoneSmsGateway.PortalList.class});
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java:325:         XStream xStream = XStreamHelper.createXStream(new Class[]{SwissphoneSmsGateway.BatchStatus.class, SwissphoneSmsGateway.MessageStatus.class});
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/X509CRLWrapper.java:118:   private void readObject(ObjectInputStream in) throws IOException, ClassNotFoundException {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/X509CRLWrapper.java:120:      this.creationDate = (Date)in.readObject();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/X509CRLWrapper.java:121:      this.crl = ((X509CRLWrapper.CRLHolder)in.readObject()).getCRL();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/FileCrlPersister.java:76:         return Optional.of((MultiIssuerCRLChecker.MedusaX509CRL)SerializationUtils.deserialize(data));
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:9:import com.thoughtworks.xstream.XStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:10:import com.thoughtworks.xstream.XStreamException;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:17:public class XStreamConfigReader implements ConfigReader {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:18:   private static final ELogger LOG = ELoggerFactory.getLogger(XStreamConfigReader.class);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:19:   private final XStream xStream;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:21:   public XStreamConfigReader(XStream xStream) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:30:      } catch (XStreamException e) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:31:         String errorMessage = this.extractMessageFromXStreamException(e);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/io/XStreamConfigReader.java:39:   private String extractMessageFromXStreamException(XStreamException e) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/CertUtils.java:101:               ASN1Sequence derSeq = (ASN1Sequence)asnStream.readObject();
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/plugin/framework/infrastructure/yaml/importer/YamlConfigurationParser.java:64:         .deactivateDefaultTyping();
=== script/expression ===