update for CVE with System.Text.Json (#2707)

update for CVE with System.Text.Json (#2707) #342