External input flows into sensitive operations without being checked for type, shape, range, or sanitization.
