1.Deserialization of Untrusted Data- CWE-502 2. Arbitrary Code Injection- CWE-94
Currenlty there is no remediation path available.