Risky Bulletin: A JSON RCE bug is about to rock the Java world