A payload that consumes excessive resources when deserialized

A serialization format that uses non-standard encoding

A large object designed to bypass validation checks

A serialized object that is encrypted with multiple keys