See details in [CVE-2022-24795](https://github.com/advisories/GHSA-jj47-x69x-mxrm), this is a CVE for yajl-ruby project and also happend in yajl. issue in lloyd/yajl: https://github.com/lloyd/yajl/issues/239