charm
charm copied to clipboard
remove use of pickle module for serialization
Pickle was never designed to be secure and is susceptible to arbitrary code execution if unpickling untrusted data. Need to switch to a safer serialization tool such as JSON.