Lucene search
+L

4 matches found

RubySec
RubySec
•added 2022/06/07 12:00 a.m.•38 views

JMESPath for Ruby using JSON.load instead of JSON.parse

jmespath.rb aka JMESPath for Ruby before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable...

9.8CVSS1.9AI score0.02425EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/06/06 10:15 p.m.•23 views

Design/Logic Flaw

jmespath.rb aka JMESPath for Ruby before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable...

7.5CVSS9.3AI score0.02425EPSS
SaveExploits0References5Affected Software2
CVE
CVE
•added 2022/06/06 9:55 p.m.•197 views

CVE-2022-32511

CVE-2022-32511 affects the Ruby gem jmespath.rb (JMESPath for Ruby)

9.8CVSS9.2AI score0.02425EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/06 12:00 a.m.•3 views

CVE-2022-32511: Undefined Security Weakness

jmespath.rb aka JMESPath for Ruby before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable...

9.8CVSS8.2AI score0.02425EPSS
SaveExploits0References7
Rows per page
Query Builder