[–] niel 1y ago ↗ JSONPath-Plus is a widely used [0] JavaScript package to query JSON objects with the JSONPath query language.Recent versions allow trivial RCE. [1][0] 800+ direct dependants https://www.npmjs.com/package/jsonpath-plus?activeTab=depend... [1] https://github.com/JSONPath-Plus/JSONPath/issues/226 [–] [deleted] 1y ago ↗ (comment deleted)
3 comments
[ 0.18 ms ] story [ 17.2 ms ] threadRecent versions allow trivial RCE. [1]
[0] 800+ direct dependants https://www.npmjs.com/package/jsonpath-plus?activeTab=depend... [1] https://github.com/JSONPath-Plus/JSONPath/issues/226