Lucene search
+L

8 matches found

NVD
NVD
•added 2026/02/09 5:16 a.m.•26 views

CVE-2026-1615

Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to process JSON Path input, which is not designed to handle untrusted data safely. An attacker can...

9.8CVSS0.01091EPSS
SaveExploits0References11
SUSE CVE
SUSE CVE
•added 2026/01/30 12:31 a.m.•12 views

SUSE CVE-2025-61140

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...

8.1CVSS5.9AI score0.00514EPSS
SaveExploits1References9
OSV
OSV
•added 2026/01/28 4:16 p.m.•16 views

CVE-2025-61140

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...

9.8CVSS5.8AI score0.00514EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-42301

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00999EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2025/02/05 8:19 a.m.•13 views

CVE-2024-47180

Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version server-2024-09-25 are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic...

8.8CVSS8.7AI score0.00999EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/09/26 7:21 p.m.•18 views

CVE-2024-47180 Shields.io Remote Code Execution vulnerability in Dynamic JSON/TOML/YAML badges

Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version server-2024-09-25 are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic...

8.8CVSS7.7AI score0.00999EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/09/26 7:21 p.m.•32 views

CVE-2024-47180 Shields.io Remote Code Execution vulnerability in Dynamic JSON/TOML/YAML badges

Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version server-2024-09-25 are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic...

8.8CVSS0.00999EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/26 12:00 a.m.•3 views

CVE-2024-47180: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Shields.io is a service for concise, consistent, and legible badges in SVG and raster format. Shields.io and users self-hosting their own instance of shields using version server-2024-09-25 are vulnerable to a remote execution vulnerability via the JSONPath library used by the Dynamic...

8.8CVSS6.3AI score0.00999EPSS
SaveExploits0References1
Rows per page
Query Builder