Jmespath vulnerabilities
We track 1 vulnerability in Jmespath products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 12, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Jmespath vulnerabilities
- 9.8 Critical severity
jmespath.php allows users to use JMESPath, software for declaratively specifying how to…
jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP applications with PHP data structures. Versions prior to 2.9.1 can generate and execute attacker-controlled PHP code when `Jme