{"items":[{"id":"CVE-2026-59990","published":"2026-09-23T18:41:12.073Z","updated":"2026-09-23T19:27:58.498Z","title":"Jawn: Uncontrolled nesting depth in JSON parser","severity":"HIGH","score":7.5,"vendor":"typelevel","product":"jawn","kev":false,"epss":0.00615,"kevAdded":null,"exploit":false},{"id":"CVE-2026-61814","published":"2026-09-23T18:39:01.067Z","updated":"2026-09-23T19:41:40.864Z","title":"Jawn: Quadratic parsing effort in AsyncParser","severity":"HIGH","score":7.5,"vendor":"typelevel","product":"jawn","kev":false,"epss":0.0075,"kevAdded":null,"exploit":false},{"id":"CVE-2025-58369","published":"2025-09-05T21:59:58.981Z","updated":"2025-11-07T11:52:43.148Z","title":"fs2: Half-shutdown of socket during TLS handshake may result in spin loop on opposite side","severity":"MEDIUM","score":5.3,"vendor":"typelevel","product":"fs2","kev":false,"epss":0.00466,"kevAdded":null,"exploit":false},{"id":"CVE-2023-50730","published":"2023-12-22T20:36:11.402Z","updated":"2024-08-02T22:16:47.266Z","title":"Grackle has StackOverflowError in GraphQL query processing","severity":"HIGH","score":7.5,"vendor":"typelevel","product":"grackle","kev":false,"epss":0.00827,"kevAdded":null,"exploit":false},{"id":"CVE-2022-31183","published":"2022-08-01T19:50:11.000Z","updated":"2025-04-22T17:45:55.210Z","title":"mTLS client verification is skipped in fs2 on Node.js","severity":"CRITICAL","score":9.1,"vendor":"typelevel","product":"fs2","kev":false,"epss":0.0083,"kevAdded":null,"exploit":true},{"id":"CVE-2022-21653","published":"2022-01-05T21:00:12.000Z","updated":"2025-04-22T18:34:05.348Z","title":"Hash collision in typelevel jawn","severity":"MEDIUM","score":5.9,"vendor":"typelevel","product":"jawn","kev":false,"epss":0.0082,"kevAdded":null,"exploit":true}]}