CVE-2025-61140

CriticalCVSS 9.8

Published: 28/01/2026(UTC)Updated: 07/09/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Summary

The value function in jsonpath version 1.1.1 (lib/index.js) is vulnerable to Prototype Pollution. An attacker can inject malicious properties into the global Object prototype, leading to unauthorized access or data modification.

Risk Assessment

The risk involves potential remote code execution or privilege escalation through prototype manipulation, compromising system integrity and confidentiality.

Recommendation

Immediately update the jsonpath library to the latest patched version and implement input validation to mitigate this vulnerability.

Other vulnerabilities in jsonpath

CVE-2026-1615Critical
The jsonpath library before version 1.3.0 is vulnerable to Remote Code Execution (RCE) in Node.js environments and Cross-site Scripting (XSS) in browsers. The vulnerability stems from unsafe use of the static-eval module to process JSON Path expressions, allowing an attacker to inject arbitrary JavaScript code. This affects all methods that evaluate JSON Paths, including .query, .nodes, .paths, .value, .parent, and .apply.

Original NVD description (English source)

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS