All rules →
Rules / Python
SHIELD-PY-016

Insecure deserialization with marshal

highPythonCWE-502CVSS 7.5

What it detects

marshal.loads() on untrusted data can cause crashes or arbitrary code execution.

How to fix

Do not deserialize untrusted data with marshal. Use JSON for data interchange.

Scan your repo freeFull documentation
Back to all rules
SHIELD-PY-016: Insecure deserialization with marshal — Zennoxa Shield