The RCE that hides inside one innocent-looking `load()` call

Picture the most ordinary code review you will do this week. A pull request adds a caching layer, or a job queue consumer, or a session store. Somewhere in the diff there is a call that turns a stored