Known vulnerabilities in JSONPath
Vendor:
JSONPath-Plus
Software:
JSONPath
Software CPE:
cpe:2.3:a:jsonpath-plus:jsonpath:*:*:*:*:*:*:*:*
Website:
https://github.com/JSONPath-Plus
Total vulnerabilities:
2
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
11.1.1
11.0.0
11.0.1
11.1.0
10.4.1
10.4.0
10.3.0
10.2.0
10.1.0
10.0.7
10.0.6
10.0.5
10.0.4
10.0.3
10.0.2
10.0.1
9.0.0
7.2.0
7.1.0
6.0.1
6.0.0
5.1.0
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
5.0.1
5.0.0
4.0.0
3.0.0
2.0.0
1.1.0
1.0.0
0.20.2
0.20.1
0.20.0
0.19.0
0.18.1
0.18.0
0.17.0
0.16.0
0.15.0
0.14.0
0.13.1
0.13.0
0.12.0
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU107638 - Improper Control of Generation of Code ('Code Injection') CVE-2025-1302 |
CWE-94 | Critical | 10.3.0 | 22.04.2025 |
SB2025042218 SB2025042219 SB2025050906 and 8 more |
||
| #VU100117 - Improper input validation CVE-2024-21534 |
CWE-20 | High | 10.0.7 | 08.11.2024 |
SB2024110840 SB2024110841 SB2024111516 and 17 more |