From 8dad92621a529a5208f1fa1734ea25daeb642238 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Thu, 26 Mar 2026 09:12:28 +0000
Subject: [PATCH] fix: resolve CodeQL alert #36 - Deserialization of
 user-controlled data

---
 vulnerable_deserialization.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/vulnerable_deserialization.py b/vulnerable_deserialization.py
index 4d443d1..be73c9f 100644
--- a/vulnerable_deserialization.py
+++ b/vulnerable_deserialization.py
@@ -37,7 +37,8 @@ def import_data():
     import_file = request.files['file']
     content = import_file.read()
     
-    data = pickle.loads(content)
+    import json as _json
+    data = _json.loads(content)
     
     return f"Imported: {data}"