High severity security flaw in JSONPath Plus allows Remote Code Execution - please update dependency #413

Open

Open

High severity security flaw in JSONPath Plus allows Remote Code Execution - please update dependency#413

High severity security flaw in JSONPath Plus allows Remote Code Execution - please update dependency

This vulnerability is preventing my team from deploying into production: https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-8719585. As stated above, please update jsonpath-plus to 10.3.0.

Contributor

It has been resolved in this PR but yet to be merged.

ContributorAuthor

I see that this has been merged and 7.3.1 is now on NPM.

Thanks to @danish-khan-I and @chris-pardy

Thank you for the quick response!

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

Code with Copilot Agent Mode

No branches or pull requests

Participants