description: A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.
problem types: Code Injection (CWE-94)
affected:
{
product: cryo
vendor: https://github.com/hunterloftis
versions:
status: affected, version: Not fixed
}