The CamelHive Standard · v3.31.0

CH-SEC-054v3.31.0

Untrusted data is never deserialized into live objects

Pinned as it read in catalog v3.31.0 — the current version of this rule may read differently, see CH-SEC-054.

Area
SEC
Severity
critical
Detection
llm
Corpus coverage
not measured by the corpus