Maven/org.typelevel:jawn-parser_3 CVE-2026-59990: high 7.5, EPSS 0.61%

Jawn: Uncontrolled nesting depth in JSON parser

Action: Upgrade org.typelevel:jawn-parser_3 to 1.7.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-cc4v-rvgp-2pf3#Maven/org.typelevel:jawn-parser_3
• https://github.com/typelevel/jawn/security/advisories/GHSA-cc4v-rvgp-2pf3
• https://github.com/typelevel/jawn/commit/191cb3a44e77f1afab439ee636bf66bdf3c54a04
• https://github.com/typelevel/jawn/commit/6219666641f9408498f85868f835e17bd8a72fed
• https://github.com/typelevel/jawn/commit/93ac93e9c992c11b4c03d5455d8551f9fb24da1b
• https://github.com/typelevel/jawn/commit/f6ace7e0db715de1a8c4618bed9378333a5c2214
• https://github.com/typelevel/jawn
• https://github.com/typelevel/jawn/releases/tag/v1.7.0

CVE-2026-59990 · published 2026-09-23T21:23:54Z · modified 2026-09-23T21:30:04.437683237Z · JSON