Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-66mm-25pp-rfff
  • npm/jsonata
 JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions 21 Aug
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-2943-5xfg-gq5f
  • npm/jsonata
 JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions 21 Aug
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-8gq3-vp5j-2grp
  • npm/jsonata
 JSONata: Arbitrary Code Execution via crafted JSONata expressions 21 Aug
  • Fix available
  • Severity - 9.3 (Critical)
GHSA-86vw-mfpg-wwv9
  • npm/jsonata
 jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion 02 Jul
  • Fix available
  • Severity - 7.5 (High)
GHSA-663r-x48j-fg8p
  • npm/jsonata
 jsonata: Function Binding Prototype Pollution via hasOwnProperty Override 15 Jun
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-fqg8-vfv7-8fj8
  • npm/jsonata
 JSONata expression can pollute the "Object" prototype 04 Mar 2024
  • Fix available
  • Severity - 9.8 (Critical)