Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2026/09/23 6:41 p.m.•52 views

CVE-2026-59990 Jawn: Uncontrolled nesting depth in JSON parser

Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted. The resulting...

7.5CVSS0.00623EPSS
SaveExploits0References6
OSV
OSV
•added 2026/09/23 6:41 p.m.•10 views

CVE-2026-59990 Jawn: Uncontrolled nesting depth in JSON parser

Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted. The resulting...

7.5CVSS6AI score
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/09/23 6:41 p.m.•15 views

CVE-2026-59990 Jawn: Uncontrolled nesting depth in JSON parser

Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted. The resulting...

7.5CVSS6.1AI score0.00623EPSS
SaveExploits0References6
Rows per page
Query Builder