A vulnerability in JSON::XS for Perl versions before 4.05 allows an attacker to cause stack exhaustion by crafting nested tagged values when using the allow_tags feature in decode_tag. This leads to an uncatchable segmentation fault due to C stack exhaustion, bypassing the max_depth protection.