jsonata-js

Products

ProductCVEsExploitedLatest
jsonata6–Aug 21, 2026

Exploited and recent CVEs

  • CVE-2026-77415 Critical 9.3 JSONata: Arbitrary Code Execution via crafted JSONata expressions 0.9%
  • CVE-2026-77414 Critical 9.3 JSONata: Arbitrary Code Execution via crafted JSONata expressions 0.6%
  • CVE-2026-77413 Critical 9.3 JSONata: Arbitrary Code Execution via crafted JSONata expressions 0.7%
  • CVE-2026-52746 High 7.5 JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion 0.7%
  • CVE-2026-12208 Medium 5.3 jsonata-js jsonata Function Binding Frame System jsonata.js createFrame prototype pollution 0.3%
  • CVE-2024-27307 Critical 9.8 JSONata expression can pollute the "Object" prototype 1.4%