	parse: function (text) {
		text = text.replace(/(\"\\\/Date\(\d+\)\\\/")/g, this.regExDate);
		return eval('(' + text + ')');
	},

The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.