Fix another weakness in the `Input` class and further harden the `deserialize()` function

Fix another weakness in the `Input` class and further harden the `deserialize()` function. Thanks to Martin Auswöger for his input.
Bump the version number
Merge branch 'hotfix/3.2.7'