CVE-2026-59990

High

Advisory

Published 23 Sept 2026In the index since 24 Sept 2026

Jawn: Uncontrolled nesting depth in JSON parser

Carried by container images the latest versions of 2 of 18,104 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
jawn-parser_3maven	1.3.2, 1.6.0	1.7.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

automatedconfigurationassist-iot-automated-configuration

1 of the 5 container images this version deploys carry CVE-2026-59990.

Container image	Digest	Package	Fixed in
assistiot/automated_configuration :latest	23f195a7a26a	jawn-parser_3@1.3.2	1.7.0

16,333

bootzookasoftwaremill

1 of the 2 container images this version deploys carry CVE-2026-59990.

Container image	Digest	Package	Fixed in
softwaremill/bootzooka :latest	dfd0d3a7246a	jawn-parser_3@1.6.0	1.7.0

881

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
assistiot/automated_configuration :latest	23f195a7a26a	jawn-parser_3@1.3.2	1.7.0	1
softwaremill/bootzooka :latest	dfd0d3a7246a	jawn-parser_3@1.6.0	1.7.0	1