I’ve released the backports:
These releases include only changes related to the DoS vulnerability.
The other changes in aeson 2.3 were quite minor as well, but non-security related, hence I’ve left them out of the backport just in case, and you can still upgrade aeson to 2.3 if you really need them.