Any Patch is available for below Issue i have not upgraded Security enhancements
In general, we’ve removed serialize/unserialize from most the code to improve protection against remote code execution attacks. We’ve enhanced protection of code where use of object serialization or unserialization was unavoidable. Additionally, we’ve increased our use of output escaping to protect against cross-site scripting (XSS) attacks.
So you need to inject \Magento\Framework\Serialize\Serializer\Json class for serialize and unserialize values.
use following code for serialize and unserialize values.
protected $serialize;
public function __construct(
\Magento\Framework\Serialize\Serializer\Json $serialize
) {
$this->serialize = $serialize;
}
public function serialize($value){
return $this->serialize->serialize($value);
}
public function unserialize($value){
return $this->serialize->unserialize($value);
}