GitHub Security Lab: [C#]: Deserialization sinks

This bug was reported directly to GitHub Security Lab...