Nowadays most of our code is opensource, and we use a large amount of it in our systems. But we need to keep an eye on those opensource components, as new vulnerabilities are discovered every day. What happens if we let our guard down? And what can we do to avoid it? In this presentation we take a look at a simple RCE vulnerability, how it can be exploited, sending pure (?) JSON to a server, in order to take control of it, in a live demo. After explaining what's happening, we then take a look at a free plugin to use directly in our IDE to prevent this, giving the power back to developers!