    async def initialize(self, bot):
        # temporary backwards compatibility
        key = await self.config.tenorkey()
        if not key:
            return
        await bot.set_shared_api_tokens("tenor", api_key=key)
        await self.config.tenorkey.clear()

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.