    public function __invoke(Request $request)
    {
        $this->authorize('manage modules');

        $path = ModuleInstaller::unzip($request->module, $request->path);

        return response()->json([
            'success' => true,
            'path' => $path
        ]);
    }
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.