Please report suspected vulnerabilities privately to Neofytos Dimitriou. Do not disclose vulnerabilities in public GitHub issues or pull requests.
Include the affected tjson version, steps to reproduce or a minimal test case, and the potential impact.
Please coordinate public disclosure with the maintainer so a fix can be prepared.