- Port https://github.com/ultrajson/ultrajson/pull/550 and https://github.com/ultrajson/ultrajson/pull/555 to fix incorrect handling of invalid surrogate pair characters (CVE-2022-31116)
- Port https://github.com/ultrajson/ultrajson/pull/519 to fix buffer overflows ([CVE-2021-4595](https://github.com/advisories/GHSA-fh56-85cw-5pq6))