Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.
CWE-502, CWE-502