VULNERABILITY INTELLIGENCE

CVE-2025-61140

CVSS score9.8 CRITICAL

EPSS probability0.53%

CISA KEVNot currently listed

Published2026-01-28

Last modified2026-09-07

Description

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.