B302.md

Pattern: Use of possibly insecure marshal module

Issue: -

Description

marshal module appears to be in use, causing a possible security issue. It is not intended to be secure against erroneous or maliciously constructed data. Never unmarshal data received from an untrusted or unauthenticated source.

This rule checks for the following calls:

• marshal.load
• marshal.loads

Further Reading

• The Python Language Reference - marshal
• Bandit - B302: marshal