Skip to content
OpenAdvisories

Package · Maven

org.typelevel:jawn-parser_3

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-59990

    Jawn: Uncontrolled nesting depth in JSON parser

    Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until the JVM heap is exhauste…

    typelevel jawn jawn org.typelevel:jawn-parser_2.13 Debian Ubuntu Maven
  • High 7.5
    CVE-2026-61814

    Jawn: Quadratic parsing effort in AsyncParser

    Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each absorb call rescans the incomplete token from the start. A remote attacker who contro…

    typelevel org.typelevel jawn jawn-parser_2.13 Debian Ubuntu Maven
  • Medium 5.9
    CVE-2022-21653

    Hash collision in typelevel jawn

    Jawn is an open source JSON parser. Extenders of the `org.typelevel.jawn.SimpleFacade` and `org.typelevel.jawn.MutableFacade` who don't override `objectContext()` are vulnerable to a hash collision attack which may result in a denial of service. Most applicat…

    typelevel jawn jawn org.typelevel:jawn-parser_2.12 Ubuntu Maven