Jmespath

2 CVEs in 2 Jmespath products, including Jmespath, Jmespath.php. Newest: CVE-2026-54133 (2026-06-12). Severity, EPSS and public exploits for each.

Jmespath products with known CVEs

ProductCVEs
Jmespath2
Jmespath.php1
Jmespath CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54133Critical9.82026-06-12jmespath.php allows users to use JMESPath, software for declaratively specifying how to extract elements from a JSON document, in PHP applications with PHP dat…
CVE-2022-32511Critical9.82022-06-06jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.