Insecure Deserialization

autoprognosis is vulnerable to Insecure Deserialization. The vulnerability is due to loading untrusted data from loadmodelfromfile function within the Release Note Handler component, resulting in Command Injection...