Hessian white/black list

[Ever]

Hi all,,
Could anyone offer a list again the [CVE-2020-11995] Apache Dubbo default 
deserialization protocol Hessian2 cause CRE??


Thanks