contrary to json pickle is protocol which allows the serialization of arbitrarily complex python objects as suchit is specific to python and cannot be used to communicate with applications written in other languages it is also insecure by defaultdeserializing pickle data coming from an untrusted source can execute arbitrary codeif the data was crafted by skilled attacker input and output