cJSON before 1.7.11 allows out-of-bounds access, related to \x00 in a string literal.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-41111.json"