Java

This enum defines an overload for the equals method using the enum's own class type. The equals() method of an enum is not meant to be overloaded (or overridden), and doing so may cause weird bugs to crop up when values of this enum are compared.

Biometric authentication should not be performed without an associated CryptoObject value.

Using features such as @JsonTypeInfo(use = JsonTypeInfo.Id.CLASS) or ObjectMapper.enableDefaultTyping() with Jackson can be a security risk, as such configurations are stepping stones towards a successful exploit.

Jackson is a well known serialization/deserialization library for Java that supports deserializing data based solely on type information contained within it. This mechanism can be abused through "deserialization gadgets" to execute attacks on the target system.

Avoid specifying unsafe configurations for Jackson deserialization.

Waiting on a monitor while two locks are held may cause deadlock. This can also happen with Lock and Condition primitives from the java.util.concurrent package.

It is not possible to change the max pool size of a ScheduledThreadPoolExecutor using the setter functions inherited from ThreadPoolExecutor.