JSON missing MaxDepth? CVE-2024-21907

[Ronald-0001]

for more information: CVE-2024-21907

[manups4e]

We are more than aware :) thanks! but FiveM do not support Newtonsoft.Json's at any version > 12.0.2 due to its own sandboxing implementation.

[manups4e]

that is also the reason why i implemented MsgPack serialization inside my library.. hoping that people would loose interest in JSON at least for what concerns event data comunication between scripts.

[Ronald-0001]

i know we cant update but cant we atleast maybe
add maxDepth to the default settings in the jsonHelper?
and maybe add maxdepth on the user given settings?