Skip to content
Ttypelevel
Products
| Product | CVEs | Exploited | Latest |
| jawn | 3 | – | Sep 23, 2026 |
| fs2 | 2 | – | Sep 5, 2025 |
| grackle | 1 | – | Dec 22, 2023 |
Exploited and recent CVEs
-
CVE-2026-59990
High 7.5
Jawn: Uncontrolled nesting depth in JSON parser
0.6%
-
CVE-2026-61814
High 7.5
Jawn: Quadratic parsing effort in AsyncParser
0.8%
-
CVE-2025-58369
Medium 5.3
fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side
0.5%
-
CVE-2023-50730
High 7.5
Grackle has StackOverflowError in GraphQL query processing
0.8%
-
CVE-2022-31183
Critical 9.1
mTLS client verification is skipped in fs2 on Node.js
0.8%
-
CVE-2022-21653
Medium 5.9
Hash collision in typelevel jawn
0.8%