Deserialization of Untrusted Data
A code injection in cryo allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.
Advisories for Npm/Cryo package
2018
A code injection in cryo allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.