black.door:jose-json-circe_2.12 (0.4.6), black.door:jose-json-ninny_2.12 (>=0.4.1, <=0.4.6) +922 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.12 (>=1.0.0-rc1, <=1.3.1)

org.typelevel:jawn-parser2.12 MAVEN version =1.0.0-rc1, =0.4.1, =0.1.0, =0.3.0, =1.0.0, =0.4.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.1 and more Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_0.25 (1.0.0), org.typelevel:jawn-util_0.25 (1.0.0) potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.25 (1.0.0)

org.typelevel:jawn-parser0.25 MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.25 and may be impacted: - org.typelevel:jawn-ast0.25 1.0.0 - org.typelevel:jawn-util0.25 1.0.0 Source cves: CVE-2022-21653 Sour...

au.id.tmm.fetch:fetch-aws-dynamodb_3 (>=0.7.0, <=0.9.2), au.id.tmm.fetch:fetch-aws-textract_3 (>=0.2.0, <=0.9.2) +336 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_3 (>=1.1.2, <=1.3.1)

org.typelevel:jawn-parser3 MAVEN version =1.1.2, =0.7.0, =0.2.0, =0.7.0, =0.2.0, =0.2.0, =0.29.0, =0.0.1, =0.0.1, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.1-7d4b1e7 and more Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_0.27 (1.0.0), org.typelevel:jawn-util_0.27 (1.0.0) potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.0)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.0 - org.typelevel:jawn-util0.27 1.0.0 Source cves: CVE-2022-21653 Sour...

org.typelevel:jawn-ast_0.27 (1.0.1), org.typelevel:jawn-json4s_0.27 (1.0.1) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.27 (1.0.1)

org.typelevel:jawn-parser0.27 MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.27 and may be impacted: - org.typelevel:jawn-ast0.27 1.0.1 - org.typelevel:jawn-json4s0.27 1.0.1 - org.typelevel:jawn-play0.27...

com.cognite.spark.datasource:cdf-spark-datasource_2.11 (>=1.3.0, <=1.4.43), com.cognite:cognite-sdk-scala_2.11 (>=1.3.0, <=1.5.16) +131 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.11 (0.14.2)

org.typelevel:jawn-parser2.11 MAVEN version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.11 and may be impacted: - com.cognite.spark.datasource:cdf-spark-datasource2.11 =1.3.0, =1.3.0, =0.1.0, =0.5.2, =0.5.2, =0.5.2...

org.typelevel:jawn-argonaut_2.10 (0.14.1), org.typelevel:jawn-ast_2.10 (0.14.1) +6 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.10 (0.14.1)

org.typelevel:jawn-parser2.10 MAVEN version 0.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.10 and may be impacted: - org.typelevel:jawn-argonaut2.10 0.14.1 - org.typelevel:jawn-ast2.10 0.14.1 -...

black.door:jose-json-circe_2.12 (0.4.6), black.door:jose-json-ninny_2.12 (>=0.4.1, <=0.4.6) +922 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.12 (>=1.0.0-rc1, <=1.3.1)

org.typelevel:jawn-parser2.12 MAVEN version =1.0.0-rc1, =0.4.1, =0.1.0, =0.3.0, =1.0.0, =0.4.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.4.0, =0.4.1 and more Source cves: CVE-2022-21653 Source advisory: OSV:GHSA-VC89-HCCF-RQ55...

com.github.fsanaulla:chronicler-ahc-io_2.11 (>=0.6.5, <=0.6.9), com.github.fsanaulla:chronicler-ahc-management_2.11 (>=0.6.5, <=0.6.9) +33 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.11 (0.14.3)

org.typelevel:jawn-parser2.11 MAVEN version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.11 and may be impacted: - com.github.fsanaulla:chronicler-ahc-io2.11 =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5,...

com.github.fsanaulla:chronicler-ahc-io_2.12 (>=0.6.5, <=0.7.0), com.github.fsanaulla:chronicler-ahc-management_2.12 (>=0.6.5, <=0.7.0) +37 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.12 (0.14.3)

org.typelevel:jawn-parser2.12 MAVEN version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.12 and may be impacted: - com.github.fsanaulla:chronicler-ahc-io2.12 =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5, =0.6.5,...

org.typelevel:jawn-ast_0.25 (1.0.0), org.typelevel:jawn-util_0.25 (1.0.0) potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_0.25 (1.0.0)

org.typelevel:jawn-parser0.25 MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser0.25 and may be impacted: - org.typelevel:jawn-ast0.25 1.0.0 - org.typelevel:jawn-util0.25 1.0.0 Source cves: CVE-2022-21653 Sour...

ch.epfl.scala:bsp4s_2.12 (2.0.0-m4+1-7c5dbafb), ch.epfl.scala:jsonrpc_2.12 (1.2.3) +98 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.12 (0.14.0)

org.typelevel:jawn-parser2.12 MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.12 and may be impacted: - ch.epfl.scala:bsp4s2.12 2.0.0-m4+1-7c5dbafb - ch.epfl.scala:jsonrpc2.12 1.2.3 -...

org.typelevel:jawn-ast_2.11 (>=1.0.0-rc1, <=1.0.0-rc2), org.typelevel:jawn-json4s_2.11 (>=1.0.0-rc1, <=1.0.0-rc2) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.11 (>=1.0.0-rc1, <=1.0.0-rc2)

org.typelevel:jawn-parser2.11 MAVEN version =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc2 Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...

org.typelevel:jawn-ast_2.11 (1.0.0-rc1), org.typelevel:jawn-json4s_2.11 (1.0.0-rc1) +3 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_2.11 (1.0.0-rc1)

org.typelevel:jawn-parser2.11 MAVEN version 1.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.typelevel:jawn-parser2.11 and may be impacted: - org.typelevel:jawn-ast2.11 1.0.0-rc1 - org.typelevel:jawn-json4s2.11 1.0.0-rc1 -...

au.id.tmm.fetch:fetch-aws-dynamodb_3 (>=0.7.0, <=0.9.2), au.id.tmm.fetch:fetch-aws-textract_3 (>=0.2.0, <=0.9.2) +336 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_3 (>=1.1.2, <=1.3.1)

org.typelevel:jawn-parser3 MAVEN version =1.1.2, =0.7.0, =0.2.0, =0.7.0, =0.2.0, =0.2.0, =0.29.0, =0.0.1, =0.0.1, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.1-7d4b1e7 and more Source cves: CVE-2022-21653 Source advisory: OSV:GHSA-VC89-HCCF-RQ55...

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

Code injection

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

UBUNTU-CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

CVE-2022-21653

Jawn is an open source JSON parser. Extenders of the "org.typelevel.jawn.SimpleFacade" and "org.typelevel.jawn.MutableFacade" who don't override "objectContext" are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits...