An issue was discovered in cereal v1.3.2 and below. Insecure deserialization of untrusted input under certain conditions may lead to type confusion -- redacted --.

-- details redacted temporarily, attempting communication with maintainers --