jsonpath vulnerabilities

1 known vulnerability in jsonpath from Jsonpath. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  jsonpath: Improper Control of Generation of Code

  CVE-2026-1615Feb 9, 2026JsonpathEPSS 1.15%

  Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to process JSON Path input, which is not designed to handle untr