All products

jsonata

npm · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
JSONata expression can pollute the "Object" prototypeCVE-2024-27307 · GHSA-FQG8-VFV7-8FJ8 jsonata npm Critical Fix reported
jsonata: Function Binding Prototype Pollution via hasOwnProperty OverrideCVE-2026-12208 · GHSA-663R-X48J-FG8P jsonataCryostat 4/cryostat/cryostat-grafana-dashboard-rhel9 npmRed Hat Medium Fix reported
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressionsCVE-2026-77415 · GHSA-66MM-25PP-RFFF jsonata npm Critical Fix reported
JSONata vulnerable to Arbitrary Code Execution via crafted JSONata expressionsCVE-2026-77414 · GHSA-2943-5XFG-GQ5F jsonata npm Critical Fix reported
JSONata: Arbitrary Code Execution via crafted JSONata expressionsCVE-2026-77413 · GHSA-8GQ3-VP5J-2GRP jsonata npm Critical Fix reported
jsonata: Malicious inputs to "$toMillis" function can cause resource exhaustionCVE-2026-52746 · GHSA-86VW-MFPG-WWV9 jsonata npm High Fix reported