Lucene search
+L

418 matches found

Github Security Blog
Github Security Blog
added 2026/09/23 9:23 p.m.2 views

Jawn: Uncontrolled nesting depth in JSON parser

The Jawn parser before 1.6.1 is vulnerable to a denial of service attack via untrusted input. Impact A remote attacker who can submit JSON to any jawn-backed parse method can exhaust JVM heap and trigger java.lang.OutOfMemoryError. This is treated by Scala as a fatal error and not typically handl...

7.5CVSS5.9AI score
SaveExploits0References7Affected Software3
Rows per page
Query Builder