Uncontrolled recursion in elixir-protobuf/protobuf JSON decoding of self-referential messages

{
                    "collectionURL": "https://repo.hex.pm",
                    "cpes": [
                        "cpe:2.3:a:elixir-protobuf:protobuf:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "modules": [
                        "'Elixir.Protobuf.JSON.Decode'",
                        "'Elixir.Protobuf.JSON'"
                    ],
                    "packageName": "protobuf",
                    "packageURL": "pkg:hex/protobuf",
                    "product": "protobuf",
                    "programFiles": [
                        "lib/protobuf/json/decode.ex",
                        "lib/protobuf/json.ex"
                    ],
                    "programRoutines": [
                        {
                            "name": "'Elixir.Protobuf.JSON.Decode':from_json_data/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON.Decode':decode_singular/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON':decode/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON':decode!/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON':from_decoded/3"
                        }
                    ],
                    "repo": "https://github.com/elixir-protobuf/protobuf",
                    "vendor": "elixir-protobuf",
                    "versions": [
                        {
                            "lessThan": "0.17.1",
                            "status": "affected",
                            "version": "0.8.0",
                            "versionType": "semver"
                        }
                    ]
                }

{
                    "collectionURL": "https://github.com",
                    "cpes": [
                        "cpe:2.3:a:elixir-protobuf:protobuf:*:*:*:*:*:*:*:*"
                    ],
                    "defaultStatus": "unaffected",
                    "modules": [
                        "'Elixir.Protobuf.JSON.Decode'",
                        "'Elixir.Protobuf.JSON'"
                    ],
                    "packageName": "elixir-protobuf/protobuf",
                    "packageURL": "pkg:github/elixir-protobuf/protobuf",
                    "product": "protobuf",
                    "programFiles": [
                        "lib/protobuf/json/decode.ex",
                        "lib/protobuf/json.ex"
                    ],
                    "programRoutines": [
                        {
                            "name": "'Elixir.Protobuf.JSON.Decode':from_json_data/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON.Decode':decode_singular/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON':decode/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON':decode!/3"
                        },
                        {
                            "name": "'Elixir.Protobuf.JSON':from_decoded/3"
                        }
                    ],
                    "repo": "https://github.com/elixir-protobuf/protobuf",
                    "vendor": "elixir-protobuf",
                    "versions": [
                        {
                            "lessThan": "e9432ad1c4099511905353cebcececa3a1f7c3ff",
                            "status": "affected",
                            "version": "b0a1d4eaffaf50012fa71a8e931a47cf252d0370",
                            "versionType": "git"
                        }
                    ]
                }