Skip to content

CVEs Search About

synced 41 MIN AGOT-41M

01 RecordSTATE: —

02 Description

SRC: CNA

03 Metadata

SCHEMA: CVE JSON 5

04 Affected products

PAIRS: —

05 References

REFS: —

CVE content courtesy of the CVE Program (cve.org). exploit.cc is not an official CVE Program property. CVE data sourced from github.com/CVEProject/cvelistV5.

SRC: CVELISTV5 / SYNC: T-41M / LAG: 49M / REC: 381,617 / REV: C6-1C / V4

01 RecordSTATE: PUBLISHED

CVE-2026-77415

JSONata: Arbitrary Code Execution via crafted JSONata expressions

CriticalPUBLISHEDCNA: GitHub_M

Base score9.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

View raw JSON CVE Program record

02 Description

CNA: GitHub_M

JSONata: Arbitrary Code Execution via crafted JSONata expressions

03 Metadata

SCHEMA: 5.2

Published

2026-08-21 21:01Z4 HR AGO

Last updated

2026-08-21 21:01Z4 HR AGO

Reserved

2026-08-20

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Critical (CVSS 9.3)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses

CWE-94Improper Control of Generation of Code ('Code Injection')Base

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

e6b3f971083a6c4e558259f7c980006691787c764d31aa457065ef856b4cdcf1

04 Affected products

PAIRS: 1

VendorProductVersionsPlatforms

jsonata-jsjsonata< 1.8.8, >= 2.0.0, < 2.2.1—

05 References

REFS: 11

github.comhttps://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfffx_refsource_CONFIRM
github.comhttps://github.com/jsonata-js/jsonata/pull/799x_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/pull/800x_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/pull/802x_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06x_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6ex_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2x_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159x_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4dx_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/releases/tag/v1.8.8x_refsource_MISC
github.comhttps://github.com/jsonata-js/jsonata/releases/tag/v2.2.1x_refsource_MISC