Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/02 8:13 p.m.29 views

jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustion

Impact Before JSONata 2.2.0 and 1.8.9, it is possible to craft non-matching inputs to the $toMillis function that cause superlinear backtracking in the ISO-8601 validation regex. This may lead to denial of service in applications that evaluate user-provided JSONata expressions. Patches This issue...

7.5CVSS5.4AI score0.00379EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder