Jsonpath
1 CVEs
product
Monthly
jsonpath library 1.1.1 has a prototype pollution vulnerability in the value function that allows attackers to modify JavaScript object prototypes and potentially achieve RCE.
Code Injection
Jsonpath
Redhat
Suse
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.1%
CVE-2025-61140
EPSS 0%
CVSS 9.8
CRITICAL
PATCH
Act Now
jsonpath library 1.1.1 has a prototype pollution vulnerability in the value function that allows attackers to modify JavaScript object prototypes and potentially achieve RCE.
Code Injection
Jsonpath
Redhat
+1
NVD
GitHub