Org.webjars.npm:jsonpath-plus vulnerabilities
We track 1 vulnerability in Org.webjars.npm:jsonpath-plus products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Org.webjars.npm:jsonpath-plus vulnerabilities
- 9.8 Critical severity
jsonpath-plus: Improper Control of Generation of Code
All versions of the package jsonpath-plus are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of vm in Node. **Note:** There were several