# Insecure deserialization.

Untrusted data turned back into objects, often leading to code execution. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Duplicate Advisory: Keycloak LDAP User Federation provider enables admin-triggered untrusted Java deserialization](https://agentprime.io/advisories/GHSA-93vm-mqpw-8wh3.md)
  `GHSA-93vm-mqpw-8wh3` · Maven `org.keycloak:keycloak-ldap-federation`: affected `<26.4.6`, fixed in `26.4.6` · CVSS 5.5 Medium · Withdrawn · Not analysed yet · Published 25 Nov 2025 · Tags: Insecure deserialization
- [An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.](https://agentprime.io/advisories/CVE-2025-61168.md)
  `CVE-2025-61168` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Nov 2025 · Tags: Insecure deserialization
- [An issue was discovered in jishenghua JSH_ERP 2.3.1.](https://agentprime.io/advisories/CVE-2025-51746.md)
  `CVE-2025-51746` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Nov 2025 · Tags: Insecure deserialization
- [An issue was discovered in jishenghua JSH_ERP 2.3.1.](https://agentprime.io/advisories/CVE-2025-51745.md)
  `CVE-2025-51745` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Nov 2025 · Tags: Insecure deserialization
- [An issue was discovered in jishenghua JSH_ERP 2.3.1.](https://agentprime.io/advisories/CVE-2025-51744.md)
  `CVE-2025-51744` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Nov 2025 · Tags: Insecure deserialization
- [An issue was discovered in jishenghua JSH_ERP 2.3.1.](https://agentprime.io/advisories/CVE-2025-51743.md)
  `CVE-2025-51743` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Nov 2025 · Tags: Insecure deserialization
- [An issue was discovered in jishenghua JSH_ERP 2.3.1.](https://agentprime.io/advisories/CVE-2025-51742.md)
  `CVE-2025-51742` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Nov 2025 · Tags: Insecure deserialization
- [WordPress WP Webhooks plugin <= 3.3.8 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-66073.md)
  `CVE-2025-66073` · CVE record: Cozmoslabs WP Webhooks · CVSS 7.2 High · Not analysed yet · Published 21 Nov 2025 · Tags: Insecure deserialization
- [WordPress Email Subscribers & Newsletters plugin <= 5.9.10 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-66055.md)
  `CVE-2025-66055` · CVE record: Icegram Email Subscribers & Newsletters · CVSS 7.2 High · Not analysed yet · Published 21 Nov 2025 · Tags: Insecure deserialization
- [Microsoft SharePoint Online Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59245.md)
  `CVE-2025-59245` · CVE record: Microsoft Microsoft SharePoint Online · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Nov 2025 · Tags: Insecure deserialization
- [IBM webMethods Integration Deserialization](https://agentprime.io/advisories/CVE-2025-36072.md)
  `CVE-2025-36072` · CVE record: IBM webMethods Integration · CVSS 8.8 High · Not analysed yet · Published 20 Nov 2025 · Tags: Insecure deserialization
- [vLLM deserialization vulnerability leading to DoS and potential RCE](https://agentprime.io/advisories/GHSA-mrw7-hf4f-83pf.md)
  `GHSA-mrw7-hf4f-83pf`, `CVE-2025-62164`, `PYSEC-2026-2018` · PyPI `vllm`: affected `>=0.10.2, <0.11.1`, fixed in `0.11.1` · CVSS 8.8 High · Not analysed yet · Published 20 Nov 2025 · Tags: Insecure deserialization, Memory corruption, CWE-20, CWE-123
- [Apache Causeway vulnerable to deserialization in Java](https://agentprime.io/advisories/GHSA-wq4c-57mh-5f7g.md)
  `GHSA-wq4c-57mh-5f7g`, `CVE-2025-64408` · Maven `org.apache.causeway.commons:causeway-commons` and 3 more: affected `<3.5.0`, fixed in `3.5.0` · CVSS 6.3 Medium · EPSS 0.12 · Not analysed yet · Published 19 Nov 2025 · Tags: Insecure deserialization
- [WP Import – Ultimate CSV XML Importer for WordPress <= 7.33.1 - Authenticated (Administrator+) PHP Object Injection via CSV Import](https://agentprime.io/advisories/CVE-2025-13145.md)
  `CVE-2025-13145` · CVE record: smackcoders WP Ultimate CSV Importer – Import CSV, XML & Excel into WordPress · CVSS 7.2 High · Not analysed yet · Published 19 Nov 2025 · Tags: Insecure deserialization
- [Modular Max Serve has Unsafe Deserialization vulnerability](https://agentprime.io/advisories/GHSA-7xcv-9j6c-2fmc.md)
  `GHSA-7xcv-9j6c-2fmc`, `CVE-2025-60455`, `PYSEC-2025-253`, `PYSEC-2026-427` · PyPI `modular`: affected `<25.6.0`, fixed in `25.6.0` · CVSS 8.4 High · Not analysed yet · Published 18 Nov 2025 · Tags: Insecure deserialization
- [AI Engine <= 3.1.8 - Authenticated (Subscriber+) PHP Object Injection via PHAR Deserialization](https://agentprime.io/advisories/CVE-2025-12844.md)
  `CVE-2025-12844` · CVE record: tigroumeow AI Engine – The Chatbot, AI Framework & MCP for WordPress · CVSS 7.1 High · Not analysed yet · Published 13 Nov 2025 · Tags: Insecure deserialization
- [Drupal core contains a chain of methods that is exploitable when an insecure deserialization vulnerability exists on the site. This so-called "gadget chain" presents no direct threat, but is a vect...](https://agentprime.io/advisories/GHSA-m6vv-vcj8-w8m7.md)
  `GHSA-m6vv-vcj8-w8m7`, `BIT-drupal-2025-13081`, `CVE-2025-13081`, `DRUPAL-CORE-2025-006`, `PKSA-xj83-g6g8-41vf` · Packagist `drupal/core`: affected `>=8.0.0, <10.4.9 || >=10.5.0, <10.5.6 || >=11.0.0, <11.1.9 || >=11.2.0, <11.2.8`, fixed in `10.4.9`, `10.5.6`, `11.1.9`, `11.2.8` · CVSS 5.9 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: Insecure deserialization, Broken access control
- [N-central windows software probe Remote Code Execution](https://agentprime.io/advisories/CVE-2025-11367.md)
  `CVE-2025-11367` · CVE record: N-able N-central · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Nov 2025 · Tags: Insecure deserialization
- [Microsoft SharePoint Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-62204.md)
  `CVE-2025-62204` · CVE record: Microsoft Microsoft SharePoint Enterprise Server 2016 and 2 more · CVSS 8.0 High · Not analysed yet · Published 11 Nov 2025 · Tags: Insecure deserialization
- [ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability.](https://agentprime.io/advisories/CVE-2025-63617.md)
  `CVE-2025-63617` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: Insecure deserialization
- [Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.3.8 - Authenticated (Administrator+) PHP Object Injection via 'import_all_courses'](https://agentprime.io/advisories/CVE-2025-12099.md)
  `CVE-2025-12099` · CVE record: kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution · CVSS 7.2 High · Not analysed yet · Published 8 Nov 2025 · Tags: Insecure deserialization
- [Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc](https://agentprime.io/advisories/GHSA-f83h-ghpp-7wcc.md)
  `GHSA-f83h-ghpp-7wcc`, `CVE-2025-70559`, `PYSEC-2026-1761` · PyPI `pdfminer-six`: affected `<20251230`, fixed in `20251230` · CVSS 7.8 High · Not analysed yet · Published 7 Nov 2025 · Tags: Insecure deserialization, Broken access control
- [Arbitrary Code Execution in pdfminer.six via Crafted PDF Input](https://agentprime.io/advisories/GHSA-wf5f-4jwr-ppcp.md)
  `GHSA-wf5f-4jwr-ppcp`, `CVE-2025-64512`, `PYSEC-2026-1762` · PyPI `pdfminer-six`: affected `<20251107`, fixed in `20251107` · CVSS 8.6 High · Not analysed yet · Published 7 Nov 2025 · Tags: Insecure deserialization
- [WordPress Togo theme < 1.0.4 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-62035.md)
  `CVE-2025-62035` · CVE record: uxper Togo · CVSS 8.8 High · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress WP User Manager plugin <= 2.9.12 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60245.md)
  `CVE-2025-60245` · CVE record: WP User Manager WP User Manager · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress s2Member Plugin <= 250701 - PHP Object Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-58998.md)
  `CVE-2025-58998` · CVE record: Cristián Lávaque s2Member · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress WP Gravity Forms Keap/Infusionsoft Plugin <= 1.2.3 - Deserialization of untrusted data Vulnerability](https://agentprime.io/advisories/CVE-2025-58636.md)
  `CVE-2025-58636` · CVE record: CRM Perks WP Gravity Forms Keap/Infusionsoft · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress Falang multilanguage Plugin <= 1.3.65 - PHP Object Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-58619.md)
  `CVE-2025-58619` · CVE record: sbouey Falang multilanguage · CVSS 8.8 High · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress TranslatePress Plugin <= 2.10.2 - Deserialization of untrusted data Vulnerability](https://agentprime.io/advisories/CVE-2025-58592.md)
  `CVE-2025-58592` · CVE record: Cozmoslabs TranslatePress · CVSS 8.1 High · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress Yogi - Health Beauty & Yoga Theme <= 2.9.2 - Deserialization of untrusted data Vulnerability](https://agentprime.io/advisories/CVE-2025-54719.md)
  `CVE-2025-54719` · CVE record: NooTheme Yogi - Health Beauty & Yoga · CVSS 8.8 High · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress WeMusic Theme <= 1.9.1 - PHP Object Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-53586.md)
  `CVE-2025-53586` · CVE record: NooTheme WeMusic · CVSS 8.8 High · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress Seil Theme <= 1.7.1 - Deserialization of untrusted data Vulnerability](https://agentprime.io/advisories/CVE-2025-53242.md)
  `CVE-2025-53242` · CVE record: VictorThemes Seil · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress Sign-up Sheets Plugin <= 2.3.2 - PHP Object Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-49393.md)
  `CVE-2025-49393` · CVE record: Fetch Designs Sign-up Sheets · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress Preserve Code Formatting Plugin <= 4.0.1 - PHP Object Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-49386.md)
  `CVE-2025-49386` · CVE record: Scott Reilly Preserve Code Formatting · CVSS 8.8 High · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [WordPress Ajax Search Lite plugin <= 4.13.3 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-48086.md)
  `CVE-2025-48086` · CVE record: wpdreams Ajax Search Lite · CVSS 5.5 Medium · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [DataEase is vulnerable to Oracle JNDI Injection](https://agentprime.io/advisories/CVE-2025-64164.md)
  `CVE-2025-64164` · CVE record: dataease dataease · CVSS 8.9 High · Not analysed yet · Published 6 Nov 2025 · Tags: Insecure deserialization
- [LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer](https://agentprime.io/advisories/GHSA-wwqv-p2pp-99h5.md)
  `GHSA-wwqv-p2pp-99h5`, `CVE-2025-64439`, `PYSEC-2026-1527` · PyPI `langgraph-checkpoint`: affected `<3.0.0`, fixed in `3.0.0` · CVSS 7.4 High · Not analysed yet · Published 5 Nov 2025 · Tags: Insecure deserialization
- [Everest Forms (Pro) <= 1.9.7 - Unauthenticated PHP Object Injection via PHAR Deserialization in Form Signature](https://agentprime.io/advisories/CVE-2025-8871.md)
  `CVE-2025-8871` · CVE record: WPEverest Everest Forms Pro · CVSS 5.6 Medium · Not analysed yet · Published 5 Nov 2025 · Tags: Insecure deserialization
- [WordPress Polylang plugin <= 3.7.3 - Deserialization of untrusted data vulnerability](https://agentprime.io/advisories/CVE-2025-64353.md)
  `CVE-2025-64353` · CVE record: Chouby Polylang · CVSS 8.8 High · Not analysed yet · Published 31 Oct 2025 · Tags: Insecure deserialization
- [cryptidy allows code execution via untrusted data due to pickle.loads](https://agentprime.io/advisories/GHSA-97w9-v595-3h5q.md)
  `GHSA-97w9-v595-3h5q`, `CVE-2025-63675`, `PYSEC-2026-1282` · PyPI `cryptidy`: affected `<=1.2.4`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: Insecure deserialization
- [Keras is vulnerable to arbitrary local file loading and Server-Side Request Forgery](https://agentprime.io/advisories/GHSA-mq84-hjqx-cwf2.md)
  `GHSA-mq84-hjqx-cwf2`, `CVE-2025-12058`, `GHSA-qg93-c7p6-gg7f`, `PYSEC-2026-1487` · PyPI `keras`: affected `<3.12.0`, fixed in `3.12.0` · CVSS 5.9 Medium · Not analysed yet · Published 29 Oct 2025 · Tags: Insecure deserialization, Server-side request forgery (SSRF)
- [Taiga Authenticated Remote Code Execution](https://agentprime.io/advisories/CVE-2025-62368.md)
  `CVE-2025-62368` · CVE record: taigaio taiga-back · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2025 · Tags: Insecure deserialization
- [quequnlong shiyi-blog Job SysJobController.java deserialization](https://agentprime.io/advisories/CVE-2025-12305.md)
  `CVE-2025-12305` · CVE record: quequnlong shiyi-blog · CVSS 5.3 Medium · Not analysed yet · Published 27 Oct 2025 · Tags: Insecure deserialization, CWE-20
- [BeWelcome/Rox PHP Object Injection RCE](https://agentprime.io/advisories/CVE-2025-34292.md)
  `CVE-2025-34292` · CVE record: BeWelcome Rox · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Oct 2025 · Tags: Insecure deserialization
- [The Utils.deserialize function in pgCodeKeeper 10.12.0 processes serialized data from untrusted sources.](https://agentprime.io/advisories/CVE-2025-46183.md)
  `CVE-2025-46183` · CVE record · CVSS 8.2 High · Not analysed yet · Published 24 Oct 2025 · Tags: Insecure deserialization
- [Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization](https://agentprime.io/advisories/GHSA-cq46-m9x9-j8w2.md)
  `GHSA-cq46-m9x9-j8w2`, `CVE-2025-71463` · PyPI `scapy`: affected `<=2.6.1`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress JobSearch plugin < 3.0.8 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-62025.md)
  `CVE-2025-62025` · CVE record: eyecix JobSearch · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Product Table For WooCommerce plugin <= 1.2.4 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-62008.md)
  `CVE-2025-62008` · CVE record: acowebs Product Table For WooCommerce · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress UNIVERSAM plugin <= 9.04.02 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60238.md)
  `CVE-2025-60238` · CVE record: universam UNIVERSAM · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60234.md)
  `CVE-2025-60234` · CVE record: designthemes Single Property · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60232.md)
  `CVE-2025-60232` · CVE record: quantumcloud KBx Pro Ultimate · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60228.md)
  `CVE-2025-60228` · CVE record: designthemes Knowledge Base · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60226.md)
  `CVE-2025-60226` · CVE record: axiomthemes White Rabbit · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60225.md)
  `CVE-2025-60225` · CVE record: AncoraThemes BugsPatrol · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Subscribe to Download plugin <= 2.0.9 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60224.md)
  `CVE-2025-60224` · CVE record: wpshuffle Subscribe to Download · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Captivate Sync Plugin <= 3.0.3 - PHP Object Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-60221.md)
  `CVE-2025-60221` · CVE record: captivateaudio Captivate Sync · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60216.md)
  `CVE-2025-60216` · CVE record: BoldThemes Addison · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-60215.md)
  `CVE-2025-60215` · CVE record: designthemes Kriya · CVSS 8.8 High · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Goldenblatt theme < 1.3.0 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60214.md)
  `CVE-2025-60214` · CVE record: BoldThemes Goldenblatt · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization
- [WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerability](https://agentprime.io/advisories/CVE-2025-60213.md)
  `CVE-2025-60213` · CVE record: Whitebox-Studio Scape · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Oct 2025 · Tags: Insecure deserialization

Newest: <https://agentprime.io/advisories/tag/deserialization.md>
Older: <https://agentprime.io/advisories/tag/deserialization.md?cursor=WyIyMDI1LTEwLTIyVDE0OjMyOjQzLjgwMDAwMFoiLCJDVkUtMjAyNS02MDIxMyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=deserialization&cursor=WyIyMDI1LTExLTI1VDIwOjM5OjE1LjAwMDAwMFoiLCJHSFNBLXh2NXAtZmp3NS12cmo2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/deserialization/?cursor=WyIyMDI1LTExLTI1VDIwOjM5OjE1LjAwMDAwMFoiLCJHSFNBLXh2NXAtZmp3NS12cmo2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.