Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/08/21 9:04 p.m.•22 views

JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressions

Before JSONata 2.2.1 and 1.8.8 it was possible to execute arbitrary code with crafted expressions, due to: - overwriting $clone allowing mutation of objects via transforms see evaluateTransformExpression - it being possible to destruct jsonata functions/lambdas e.g. $merge. - applyProcedure using...

9.3CVSS8.5AI score0.00892EPSS
SaveExploits0References12Affected Software1
Rows per page
Query Builder