Lucene search
+L

3 matches found

OSV
OSV
added 2026/02/09 6:30 a.m.8 views

GHSA-87R5-MP6G-5W5J jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

Impact Arbitrary Code Injection Remote Code Execution & XSS: A critical security vulnerability affects all versions of the jsonpath package. The library relies on the static-eval module to evaluate JSON Path expressions but fails to properly sanitize or sandbox the input. This allows an attacker ...

9.8CVSS6.1AI score0.01049EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.15 views

PT-2026-7066

Name of the Vulnerable Software and Affected Versions jsonpath affected versions not specified Description The package jsonpath is susceptible to Arbitrary Code Injection due to unsafe evaluation of user-supplied JSON Path expressions. The library utilizes the static-eval module to process JSON...

9.8CVSS5.9AI score0.01049EPSS
SaveExploits0References102
RedHat Linux
RedHat Linux
added 2018/11/27 1:39 a.m.148 views

Moderate: Red Hat Security Advisory: sos-collector security update

An update for sos-collector is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

5.9CVSS6.1AI score0.00429EPSS
SaveExploits1References2
Rows per page
Query Builder