Jsonata-js vulnerabilities
We track 5 vulnerabilities in Jsonata-js products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 21, 2026.
Latest Jsonata-js vulnerabilities
- 9.3 Critical severity
jsonata: Improper Control of Generation of Code
JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code. The chain could overwrite $clone to mutate objects through evaluateTransformEx
- 9.3 Critical severity
jsonata: Improper Control of Generation of Code
JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, the src/jsonata.js environment.lookup function used a bypassable hasOwnProperty check. Crafted expressions could use $hasOwnProperty, $spread, $string, prototype access, and $constr
- 9.3 Critical severity
jsonata: Improper Control of Generation of Code
JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty check and allowed crafted expressions to access inherited prototype members. An attacker able to suppl
- 7.5 High severity
jsonata: Inefficient Regular Expression Complexity
JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evalua
- 9.8 Critical severity
jsonata: Improperly Controlled Modification of Object Prototype Attributes
JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transform operator to override properties on the `Object` constructor and prototype. This may lead to denial