GJSON <1.6.5 allows malicious users to cause a denial of service (remote) via crafted JSON.
gjson project gjson