    public function __sleep()
    {
        throw new \BadMethodCallException('Cannot serialize '.__CLASS__);
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.