Skip to content
OpenAdvisories

Vendor

typelevel

6 known vulnerabilities.

Products

jawn 3 fs2 2 grackle 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-59990

    Jawn: Uncontrolled nesting depth in JSON parser

    Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until the JVM heap is exhauste…

    typelevel jawn jawn org.typelevel:jawn-parser_2.13 Debian Ubuntu Maven
  • High 7.5
    CVE-2026-61814

    Jawn: Quadratic parsing effort in AsyncParser

    Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each absorb call rescans the incomplete token from the start. A remote attacker who contro…

    typelevel org.typelevel jawn jawn-parser_2.13 Debian Ubuntu Maven
  • High 7.5
    CVE-2023-50730

    Grackle has StackOverflowError in GraphQL query processing

    Grackle is a GraphQL server written in functional Scala, built on the Typelevel stack. The GraphQL specification requires that GraphQL fragments must not form cycles, either directly or indirectly. Prior to Grackle version 0.18.0, that requirement wasn't chec…

    typelevel grackle org.typelevel:grackle-core_sjs1_3 org.typelevel:grackle-core_native0.4_3 Maven