CVE-2023-33460, ruby-yajl affected?

Anton Gladky <[email protected]> Wed, 5 Jul 2023 06:52:48 +0200
Newsgroups gmane.linux.debian.devel.lts,gmane.linux.debian.devel.security
Message-ID <CALF6qJnB54MTcMXLFSj1vz1BA-J0mdUjEYGDjBiWrFk=ZLxVqg@mail.gmail.com>
Hello,

I am looking into CVE-2023-33460 and I am not sure that ruby-yajl
is affected. There is no direct dependency on yajl, where the vulnerability
was detected.

Should ruby-yajl be unmarked as affected by this CVE?

Thank you

Anton