npm: Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length

npm: Seroval fromJSON/fromCrossJSON denial of service via unvalidated array node length vulnerability discovered by ? in WordPress npm seroval versions = 1.4.1, = 1.6.7...