GJSON before 1.9.3 allows a ReDoS (regular expression denial of service) attack.
mitre·CWE-400·Published 2021-10-22