Known vulnerabilities in jsonpath
Vendor:
dchester
Software:
jsonpath
Software CPE:
cpe:2.3:a:dchester:jsonpath:*:*:*:*:*:*:*:*
Website:
https://github.com/dchester
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123311 - Improper Control of Generation of Code ('Code Injection') CVE-2026-1615 |
CWE-94 | High | 1.2.0 | 27.02.2026 |
SB2026022707 SB2026022708 SB2026032720 and 4 more |
||
| #VU123310 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2025-61140 |
CWE-1321 | High | 1.1.2 | 27.02.2026 |
SB2026022706 SB2026022708 SB2026030405 and 3 more |