Language: Java
Label: vulnerable
CWE: CWE-502 \u2014 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Code:
		private void handlePacketData(final Pair<EntityPlayer, byte[]> playerDataPair) {
			try {
				LPDataIOWrapper.provideData(playerDataPair.getValue2(), input -> {
					PacketHandler.onPacketData(input, playerDataPair.getValue1());
				});
			} catch (IOException e) {
				System.err.println("IO Error in handlePacketData for player " + playerDataPair.getValue1().getCommandSenderName());
				e.printStackTrace();
			}
		}