    public function __wakeup()
    {
        throw new \BadMethodCallException('Cannot unserialize '.__CLASS__);
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.