Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in AsyncParser in parser/shared/src/main/scala/jawn/AsyncParser.scala. An attacker can exhaust CPU by sending untrusted JSON tokens split across many tiny chunks so each absorb call rescans the same...

au.id.tmm.fetch:fetch-aws-dynamodb_3 (>=0.7.0, <=0.9.2), au.id.tmm.fetch:fetch-aws-textract_3 (>=0.2.0, <=0.9.2) +336 more potentially affected by CVE-2022-21653 via org.typelevel:jawn-parser_3 (>=1.1.2, <=1.3.1)

org.typelevel:jawn-parser3 MAVEN version =1.1.2, =0.7.0, =0.2.0, =0.7.0, =0.2.0, =0.2.0, =0.29.0, =0.0.1, =0.0.1, =0.0-a75a626, =0.0-a75a626, =0.0-a75a626, =0.1-7d4b1e7 and more Source cves: CVE-2022-21653 Source advisory: GHSA-VC89-HCCF-RQ55...