hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).
CWE-502, CWE-502