Insecure Deserialization

Serialization converts in-memory data structures to binary or text format for storage or transmission. Deserialization reverses the process. If your application accepts serialized data from untrusted sources, attackers can manipulate behavior and possibly execute code.