Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the checkforbiddenxcomkeys validator in the Task Execution API's setxcom handler, which fails to inspect XCom values submitted as JSON string literals. The walk helper recursively checks dict and li...