codeql/java/ql/test/query-tests/security/CWE-502/ObjectMessageTest.java

import javax.jms.Message;
import javax.jms.MessageListener;
import javax.jms.ObjectMessage;

public class ObjectMessageTest implements MessageListener {
    public void onMessage(Message message) {
        ((ObjectMessage) message).getObject(); // $ unsafeDeserialization
    }
}