RubyGems package

jmespath

pkg:gem/jmespath

Vulnerabilities (1)

CVE	Sev	CVSS	KEV	Affected versions	Fixed in	Published	Description
CVE-2022-32511	Cri	9.8		< 1.6.1	1.6.1	Jun 6, 2022	jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.

CVE-2022-32511CriJun 6, 2022
affected < 1.6.1fixed 1.6.1
jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.