JM
Product
jmespath.php
by jmespath · last CVE Jun 12, 2026
1
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add jmespath.php to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54133
9.8
0%
Jun 12
jmespath.php has CompilerRuntime code injection via unescaped function names
Affected: < 2.9.1
Showing 1