yaml.

Config files that execute code are everywhere

YAML, TOML, and JSON parsers can run arbitrary code during deserialization. Most dependency scanners miss them entirely.