Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/08/21 9:04 p.m.20 views

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

Before JSONata 2.2.1 and 1.8.8 it was possible to execute arbitrary code with crafted expressions, due to: - overwriting $clone allowing mutation of objects via transforms see evaluateTransformExpression - it being possible to destruct jsonata functions/lambdas e.g. $merge. - applyProcedure using...

9.3CVSS5.9AI score0.00645EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder