Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/21 9:04 p.m.12 views

GHSA-66MM-25PP-RFFF JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

Before JSONata 2.2.1 and 1.8.8 it was possible to execute arbitrary code with crafted expressions, due to: - overwriting $clone allowing mutation of objects via transforms see evaluateTransformExpression - it being possible to destruct jsonata functions/lambdas e.g. $merge. - applyProcedure using...

9.3CVSS6AI score0.00645EPSS
SaveExploits0References12
Rows per page
Query Builder