Jawn 加密问题漏洞

Jawn is Typelevel open source for parsing Jay-Sawn Json. Jawn has a security vulnerability that can be exploited by attackers to perform denial-of-service attacks...

CVE-2022-21653: Uncontrolled Resource Consumption

Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override objectContext are vulnerable to a hash collision attack which may result in a denial of service. Most applications do not implement these traits directly, b...

PT-2022-15008

Name of the Vulnerable Software and Affected Versions jawn-parser versions prior to 1.3.1 org.typelevel :: jawn-ast versions prior to 0.8.0 Description Jawn is an open source JSON parser. Extenders of the org.typelevel.jawn.SimpleFacade and org.typelevel.jawn.MutableFacade who don't override...