PT-2026-60699

Name of the Vulnerable Software and Affected Versions Jawn versions prior to 1.7.0 Description Jawn parse methods allow arbitrarily deep JSON array and object nesting without a depth limit. A remote attacker can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted,...

PT-2026-60700

Name of the Vulnerable Software and Affected Versions Jawn versions prior to 1.7.0 Description The AsyncParser component can perform quadratic work when a single JSON token is delivered across many small chunks, as each absorb call rescans the incomplete token from the beginning. A remote attacke...