CVE-2025-61140

35th percentile - higher than 35% of all known CVEs

The value function in jsonpath version 1.1.1 (lib/index.js) is vulnerable to Prototype Pollution. An attacker can inject malicious properties into the global Object prototype, leading to unauthorized access or data modification.

The risk involves potential remote code execution or privilege escalation through prototype manipulation, compromising system integrity and confidentiality.

Immediately update the jsonpath library to the latest patched version and implement input validation to mitigate this vulnerability.