    public function getKafkaPubTool()
    {
        if (!$this->loadedKafkaPubTool) {
            App::uses('KafkaPubTool', 'Tools');
            $kafkaPubTool = new KafkaPubTool();
            $rdkafkaIni = Configure::read('Plugin.Kafka_rdkafka_config');
            $rdkafkaIni = mb_ereg_replace("/\:\/\//", '', $rdkafkaIni);
            $kafkaConf = array();
            if (!empty($rdkafkaIni)) {
                $kafkaConf = parse_ini_file($rdkafkaIni);
            }
            $brokers = Configure::read('Plugin.Kafka_brokers');
            $kafkaPubTool->initTool($brokers, $kafkaConf);
            $this->loadedKafkaPubTool = $kafkaPubTool;
        }
        return $this->loadedKafkaPubTool;
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.