The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.0131·Published 2023-08-22·Fixed in 3.14.0CWE-754