2025-07-16-models-as-data-unsafe-deserialization-sinks.md

category	feature

• You can now add sinks for the query "Deserialization of user-controlled data" (java/unsafe-deserialization) using data extensions by extending sinkModel and using the kind "unsafe-deserialization". The existing sinks which do not require extra logic to determine if they are unsafe are now defined in this way.