npm/jsonpath

JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js

Modified: 2/5/2026

jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

Modified: 3/19/2026