From 8ff18c58b23dda08b67e13079b43ec73960d49b5 Mon Sep 17 00:00:00 2001
From: Inverle <inverle@proton.me>
Date: Tue, 8 Sep 2026 21:46:18 +0200
Subject: [PATCH] Harden cache deserialization calls

---
 src/Cache/File.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/Cache/File.php b/src/Cache/File.php
index 110a77c43..42a16b11c 100644
--- a/src/Cache/File.php
+++ b/src/Cache/File.php
@@ -85,7 +85,10 @@ public function save($data)
     public function load()
     {
         if (file_exists($this->name) && is_readable($this->name)) {
-            return unserialize((string) file_get_contents($this->name));
+            $deserialized = unserialize((string) file_get_contents($this->name), ['allowed_classes' => false]);
+            if (is_array($deserialized)) {
+                return $deserialized;
+            }
         }
         return false;
     }