CVE-2024-21907

CVE-2024-21907 affects Newtonsoft.Json before 13.0.1. Crafted data passed to JsonConvert.DeserializeObject may trigger a StackOverflow, causing denial of service; exploitation may be possible remotely and without authentication depending on how the library is used. IBM and Microsoft advisories co...