JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...

CVE-2025-61140

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution...

PT-2026-5135

Name of the Vulnerable Software and Affected Versions jsonpath version 1.1.1 Description The value function in jsonpath lib/index.js is susceptible to Prototype Pollution. This allows for modification of the prototype of JavaScript objects, potentially leading to unexpected behavior or code...