JS
Vendor
jsonata-js
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-77415 | JS jsonata jsonata-js | 9.3 | Aug 21 | JSONata: Arbitrary Code Execution via crafted JSONata expressions |
| CVE-2026-77414 | JS jsonata jsonata-js | 9.3 | Aug 21 | JSONata: Arbitrary Code Execution via crafted JSONata expressions |
| CVE-2026-77413 | JS jsonata jsonata-js | 9.3 | Aug 21 | JSONata: Arbitrary Code Execution via crafted JSONata expressions |
| CVE-2026-52746 | JS jsonata jsonata-js | 7.5 | Jul 17 | JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion |
| CVE-2026-12208 | JS jsonata jsonata-js | 5.3 | Jun 15 | jsonata-js jsonata Function Binding Frame System jsonata.js createFrame prototype pollution |
| CVE-2024-27307 | JS jsonata jsonata-js | 9.8 | Mar 6 | JSONata expression can pollute the "Object" prototype |