org.webjars.npm:jsonpath-plus@4.0.0 vulnerabilities
-
latest version
6.0.1
-
first published
4 years ago
-
latest version published
2 years ago
-
licenses detected
- [3.0.0,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.webjars.npm:jsonpath-plus package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
org.webjars.npm:jsonpath-plus is an A JS implementation of JSONPath with some additional operators Affected versions of this package are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of Note: This vulnerability was mitigated in version 10.0.0 but it can still be exploited using different payloads. How to fix Remote Code Execution (RCE)? There is no fixed version for |
[0,)
|