hope-boot 1.0.0 has a deserialization vulnerability that can cause Remote Code Execution (RCE).
Related posts