Jinyitong

The issue concerns Deserialization of Untrusted Data due to an insecure `unserialize` method in the `Driver` class. This allows for potential exploitation.

The issue allows for Remote Code Execution by connecting to a malicious database server. This can cause arbitrary file read and deserialization of local gadgets.

Latte is an open source template engine for PHP. A sandbox escape exists in the template sandbox, allowing for injection into web pages generated from Latte, which may lead to XSS attacks. The issue affects users who use the sandbox in Latte and templates from untrusted sources.

The issue affects systems that deserialize user input without validation, allowing the `RunProcess` class to be leveraged as a gadget to run arbitrary commands.