OR
Product
org.webjars.npm:jsonpath
by · last CVE Feb 9, 2026
1
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add org.webjars.npm:jsonpath to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1615
9.8
1%
Feb 9
Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions
Affected: 0
Showing 1