Microsoft has officially labelled BinaryFormatter as fundamentally insecure
Opened this issue · 1 comments
Bod9001 commented
https://learn.microsoft.com/en-gb/dotnet/standard/serialization/binaryformatter-security-guide
I did notice this was used in the project here and here, and looks like it could be relatively easily exploited to send malicious packets to the server/other clients, best to swap it out for something else.