    public function __invoke(Request $request)
    {
        $this->authorize('manage modules');

        $response = ModuleInstaller::upload($request);

        return response()->json($response);
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.