Design/Logic Flaw

jmespath.rb aka JMESPath for Ruby before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable...

CVE-2022-32511

CVE-2022-32511 affects the Ruby gem jmespath.rb (JMESPath for Ruby)

CVE-2022-32511

jmespath.rb aka JMESPath for Ruby before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable...

PT-2022-21350 · Unknown +2 · Jmespath.Rb +2

Name of the Vulnerable Software and Affected Versions: jmespath.rb versions prior to 1.6.1 Description: The issue arises from jmespath.rb using JSON.load in a situation where JSON.parse is preferable, potentially leading to remote code execution. Recommendations: For versions prior to 1.6.1, upda...