        def _unmarshal(val, options)
          unmarshal?(val, options) ? Marshal.load(val) : val
        end
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.