jawn vulnerabilities
CVEs whose affected-version data names the jawn package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-61814High· 7.5Jawn is an open source JSON parser
Jawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many small chunks because each absorb call rescans the incomplete token from the start. A remo…
▾ Twilighttypelevel · jawnvia NVD
CVE-2026-59990High· 7.5Jawn is an open source JSON parser
Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until th…
▾ Twilighttypelevel · jawnvia NVD