CompTIA PenTest+ (PT0-003) PT0-003 — Question 308

A penetration tester reviews a scan report and identifies a deserialization vulnerability. The vulnerability is due to the way a function from a Python library has been used in code. The scan does not consider input data being used in the function's serialization. Which of the following scan types most likely provided this finding?