MEDIUMnpm
GHSA-6c59-mwgh-r2x6· CVE-2025-61140JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js
Modified: 2/5/2026
package
pkg:npm/jsonpath
JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js
Modified: 2/5/2026
jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions
Modified: 3/19/2026