{"source":1100203,"name":"jsonpath-plus","dependency":"jsonpath-plus","title":"JSONPath Plus Remote Code Execution (RCE) Vulnerability","url":"https://github.com/advisories/GHSA-pppg-cpfq-h7wr","severity":"critical","versions":["0.12.0","0.13.0","0.13.1","0.14.0","0.15.0","0.16.0","0.17.0","0.18.0","0.18.1","0.19.0","0.20.0","0.20.1","1.0.0","1.1.0","2.0.0","3.0.0","4.0.0","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.1.0","6.0.0","6.0.1","7.0.0","7.1.0","7.2.0","8.0.0","8.1.0","9.0.0","10.0.0","10.0.1","10.0.2","10.0.3","10.0.4","10.0.5","10.0.6","10.0.7","10.1.0"],"vulnerableVersions":["0.12.0","0.13.0","0.13.1","0.14.0","0.15.0","0.16.0","0.17.0","0.18.0","0.18.1","0.19.0","0.20.0","0.20.1","1.0.0","1.1.0","2.0.0","3.0.0","4.0.0","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.0.5","5.0.6","5.0.7","5.1.0","6.0.0","6.0.1","7.0.0","7.1.0","7.2.0","8.0.0","8.1.0","9.0.0"],"cwe":["CWE-94"],"cvss":{"score":9.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"range":"<10.0.0","id":"eFhjxS3kIIGyWuMAQ6LH9b3dbFxBmG+UmuKJ9KaYigbiAkVYBlkmebHNzYibJE5ybQl7hDBiw732/L3edvHOqg=="}