CVE-2026-59990
3 advisories.
Maven/org.typelevel:jawn-parser_2.12 CVE-2026-59990: high 7.5
Jawn: Uncontrolled nesting depth in JSON parser
Action: Upgrade org.typelevel:jawn-parser_2.12 to 1.7.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-cc4v-rvgp-2pf3
- https://github.com/typelevel/jawn/security/advisories/GHSA-cc4v-rvgp-2pf3
- https://github.com/typelevel/jawn/commit/191cb3a44e77f1afab439ee636bf66bdf3c54a04
- https://github.com/typelevel/jawn/commit/6219666641f9408498f85868f835e17bd8a72fed
- https://github.com/typelevel/jawn/commit/93ac93e9c992c11b4c03d5455d8551f9fb24da1b
- https://github.com/typelevel/jawn/commit/f6ace7e0db715de1a8c4618bed9378333a5c2214
- https://github.com/typelevel/jawn
- https://github.com/typelevel/jawn/releases/tag/v1.7.0
CVE-2026-59990 · published · modified · JSON
Maven/org.typelevel:jawn-parser_2.13 CVE-2026-59990: high 7.5
Jawn: Uncontrolled nesting depth in JSON parser
Action: Upgrade org.typelevel:jawn-parser_2.13 to 1.7.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-cc4v-rvgp-2pf3#Maven/org.typelevel:jawn-parser_2.13
- https://github.com/typelevel/jawn/security/advisories/GHSA-cc4v-rvgp-2pf3
- https://github.com/typelevel/jawn/commit/191cb3a44e77f1afab439ee636bf66bdf3c54a04
- https://github.com/typelevel/jawn/commit/6219666641f9408498f85868f835e17bd8a72fed
- https://github.com/typelevel/jawn/commit/93ac93e9c992c11b4c03d5455d8551f9fb24da1b
- https://github.com/typelevel/jawn/commit/f6ace7e0db715de1a8c4618bed9378333a5c2214
- https://github.com/typelevel/jawn
- https://github.com/typelevel/jawn/releases/tag/v1.7.0
CVE-2026-59990 · published · modified · JSON
Maven/org.typelevel:jawn-parser_3 CVE-2026-59990: high 7.5
Jawn: Uncontrolled nesting depth in JSON parser
Action: Upgrade org.typelevel:jawn-parser_3 to 1.7.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: GHSA-cc4v-rvgp-2pf3#Maven/org.typelevel:jawn-parser_3
- https://github.com/typelevel/jawn/security/advisories/GHSA-cc4v-rvgp-2pf3
- https://github.com/typelevel/jawn/commit/191cb3a44e77f1afab439ee636bf66bdf3c54a04
- https://github.com/typelevel/jawn/commit/6219666641f9408498f85868f835e17bd8a72fed
- https://github.com/typelevel/jawn/commit/93ac93e9c992c11b4c03d5455d8551f9fb24da1b
- https://github.com/typelevel/jawn/commit/f6ace7e0db715de1a8c4618bed9378333a5c2214
- https://github.com/typelevel/jawn
- https://github.com/typelevel/jawn/releases/tag/v1.7.0
CVE-2026-59990 · published · modified · JSON