MyBatis before 3.5.6 mishandles deserialization of object streams.Referenceshttps://github.com/mybatis/mybatis-3/pull/2079https://github.com/mybatis/mybatis-3/compare/mybatis-3.5.5...mybatis-3.5.6
