Code AnalysisHard 50s

Trace: Insecure Deserialization

What is the core risk here?

Starter code

const obj = serialize.unserialize(req.body.data);
if (obj.isAdmin) {
  grantAccess();
}

Think you can answer under pressure?

Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.