Vulnerabilities

TI-2026-54005 CVE-2026-77415 · GHSA-66mm-25pp-rfff

JSONata: Arbitrary Code Execution via crafted JSONata expressions

HIGH 81

JSONata is a JSON query and transformation language.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00892 Published 2026-08-21 Fixed in 1.8.8, 2.2.1 CWE-94

TI-2026-54004 CVE-2026-77414 · GHSA-2943-5xfg-gq5f

HIGH 81

JSONata is a JSON query and transformation language.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0057 Published 2026-08-21 Fixed in 1.8.8, 2.2.1 CWE-94

TI-2026-54003 CVE-2026-77413 · GHSA-8gq3-vp5j-2grp

HIGH 81

JSONata is a JSON query and transformation language.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00719 Published 2026-08-21 Fixed in 2.2.0, 1.8.8 CWE-94

TI-2026-10500 CVE-2026-12208 · GHSA-663r-x48j-fg8p

HIGH 70

A weakness has been identified in jsonata-js jsonata up to 2.2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00314 Published 2026-06-15 Partial fix · 1.8.8, 2.2.1 CWE-1321