Security release

This release fixes 2 high severity and 9 moderate severity security vulnerabilities as listed below.

This release is missing #2269 from the v2.5.205 release. We recommend folks adopt the v2.5.302 release which has all the security fixes combined.

High severity advisory fixes

• 696b4a7 GHSA-vh6j-jc39-fggf Use iteration for skipping msgpack structures for CWE-674
• 3538bc1 GHSA-hv8m-jj95-wg3x Bound LZ4 input reads for CWE-125

Moderage severity advisory fixes

• 853429a GHSA-v72x-2h86-7f8m Guard LZ4 decompression length for CWE-409
• 826f17c GHSA-qhmf-xw27-6rqr Reject nested typeless blocklist bypass for CWE-502
• c98d31f GHSA-2f33-pr97-265q Default MVC input formatter to UntrustedData for CWE-1188
• ae90f2b GHSA-2x83-8g95-xh59 Limit untrusted ExpandoObject maps for CWE-407
• 940b850 GHSA-wfr3-xj75-pfwh Guard dynamic union depth for CWE-674
• e01f07c GHSA-w567-gjr2-hm5j Validate Unity blit lengths for CWE-789
• dc6f632 GHSA-cxmj-83gh-fp49 Fix CWE-789 multidimensional array allocation validation
• e97f71e GHSA-q2h6-ghwm-5qm8 Use secure lookup comparer for CWE-407
• 7b12e5b GHSA-cj9g-3mj2-g8vv Guard JSON conversion depth for CWE-674
• a3c8a18 GHSA-cj9g-3mj2-g8vv Avoid JSON separator recursion for CWE-674
• 9674352 GHSA-cj9g-3mj2-g8vv Guard typeless JSON depth for CWE-674

Fixes with no security advisory

• 814bc4c Honor TypeFormatter options hooks for CWE-470
• b0f8c5e Fix WriteRawX methods to advance by written length
• 0124048 Fix CWE-190 map header length overflow