Skip to content

Tracks

AI-assisted engineering Working with AI Agents System design Core systems Data and AI systems Coding Coding problems Code review On-call SQL

Practice

Paths Concept guides

FreeAd-supported

The plan adds AI feedback and removes ads.

Concept guides/Correctness review/Insecure deserialization

CodingCorrectness review

Insecure deserialization

Hard3 min read

Questions it teaches

YAML deserialization executes codeMedium18 min Config file parsed with YAML.loadMedium22 min Redis cache deserializes untrusted pickleHard30 min Insecure deserialization in Java endpointHard30 min Pickle deserializes untrusted dataHard30 min Jackson polymorphic deserializationHard35 min Arbitrary code executes from cookieHard25 min

Related

Correctness review Arrays and strings Error handling Performance review Security review Reviewing AI code Concurrency

Builds on: Arrays and strings

Arrays & in-place tricks3 min Hash maps & sets3 min

Leads to: Error handling

Error handling & resilience3 min Blocking accept with no timeout4 min

Leads to: Performance review

Performance bugs3 min SQL query performance4 min

Leads to: Security review

Security vulnerabilities3 min Hardcoded secrets3 min

© 2026 Prep Room·From California·AI can make mistakes.

About Legal Contact Cookies Your privacy choices

Home Review Tracks Paths