Any security concerns with JSON-LD?

Avoid injecting untrusted user content into JSON-LD without sanitization. Keep schema generation server-side or from trusted CMS sources.