VYPR
Critical severity9.8NVD Advisory· Published Jan 28, 2026· Updated Aug 6, 2026

CVE-2025-61140

CVE-2025-61140

Description

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
jsonpathnpm
< 1.2.01.2.0

Affected products

79

Patches

Vulnerability mechanics

References

16

News mentions

0

No linked articles in our index yet.