unserialized

Unserialized refers to data that has not been converted into a serialized form for storage or transmission. In computing, serialization is the process of transforming complex data structures, such as objects or graphs, into a linear sequence of bytes or a text string. This serialized form is suitable for persistence, communication, or caching, while the original in-memory representation is not.

Data that has not undergone serialization typically exists in memory as native structures of a programming language, such as lists, dictionaries, objects, or other in-memory constructs. Such data is described as unserialized or simply as being in its in-memory state. When needed for storage or transfer, the data are serialized into formats like JSON, XML, YAML, or binary forms; deserialization is the reverse process that reconstructs the in-memory structures from the serialized form.

Contexts where unserialized data is common include program execution, intermediate results, and temporary data held while a system processes input. Developers design workflows to serialize data for inter-process communication, network transmission, or long-term storage, and to deserialize it when needed again.

Security and reliability considerations arise when handling serialized data from untrusted sources. Deserialization vulnerabilities can lead to unintended object creation or code execution in some environments. Mitigation strategies emphasize validating inputs, using safe, well-defined formats, implementing strict schemas, and employing principled deserialization practices.

Related concepts include serialization, deserialization, and data interchange formats. Understanding unserialized data helps clarify when data exists in memory versus when it is converted for persistence or transport.