@@ -206,6 +206,10 @@ instance HasResolution a => ToJSON (Fixed a) where
206206 toJSON = Number . realToFrac
207207 {-# INLINE toJSON #-}
208208
209+-- | /WARNING:/ Only parse fixed-precision numbers from trusted input
210+-- since an attacker could easily fill up the memory of the target
211+-- system by specifying a scientific number with a big exponent like
212+-- @1e1000000000@.
209213instance HasResolution a => FromJSON (Fixed a) where
210214 parseJSON = withScientific "Fixed" $ pure . realToFrac
211215 {-# INLINE parseJSON #-}