Skip to content
OpenAdvisories

Vendor

org.typelevel

1 known vulnerabilities.

Products

jawn-parser_2.12 1 jawn-parser_2.13 1 jawn-parser_3 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-61814

    Jawn: Quadratic parsing effort in AsyncParser

    Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each absorb call rescans the incomplete token from the start. A remote attacker who contro…

    typelevel org.typelevel jawn jawn-parser_2.13 Debian Ubuntu Maven