Jsonata-Js

6 CVEs across 1 Jsonata-Js products. Browse Jsonata-Js vulnerabilities, severities, and proof-of-concept exploits.

Jsonata-Js products with known CVEs

ProductCVEs
Jsonata6
Jsonata-Js CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-774152026-08-21JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to e…
CVE-2026-774142026-08-21JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, the src/jsonata.js environment.lookup function used a bypassable hasOwnProperty…
CVE-2026-774132026-08-21JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup function lacked an Object.prototype.hasOwnProperty c…
CVE-2026-52746High7.52026-07-17JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear ba…
CVE-2026-12208Medium5.32026-06-15A weakness has been identified in jsonata-js jsonata up to 2.2.0. The affected element is the function createFrame of the file src/jsonata.js of the component…
CVE-2024-27307Critical9.82024-03-06JSONata is a JSON query and transformation language. Starting in version 1.4.0 and prior to version 1.8.7 and 2.0.4, a malicious expression can use the transfo…