[*] Testing patched deserialization path... [*] Evidence file: /Users/g/code/pruva/tickets/ghsa-g8c6-8fjj-2r4m/repro/logs/evidence_patch.txt [PATCHED] Deserializing message with json.loads()... [PATCHED] Error (expected for pickle payload): 'utf-8' codec can't decode byte 0x80 in position 0: invalid start byte [+] PATCHED - Malicious payload rejected [+] JSON deserialization does not execute code