typelevel

Products

ProductCVEsExploitedLatest
jawn3–Sep 23, 2026
fs22–Sep 5, 2025
grackle1–Dec 22, 2023

Exploited and recent CVEs

  • CVE-2026-59990 High 7.5 Jawn: Uncontrolled nesting depth in JSON parser 0.6%
  • CVE-2026-61814 High 7.5 Jawn: Quadratic parsing effort in AsyncParser 0.8%
  • CVE-2025-58369 Medium 5.3 fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side 0.5%
  • CVE-2023-50730 High 7.5 Grackle has StackOverflowError in GraphQL query processing 0.8%
  • CVE-2022-31183 Critical 9.1 mTLS client verification is skipped in fs2 on Node.js 0.8%
  • CVE-2022-21653 Medium 5.9 Hash collision in typelevel jawn 0.8%