Security Advisories

CGA-jp9p-3rpx-m6mr

Published

Last updated

Package

py3-jmespath

Latest Update

Not affected

Aliases

Severity

9.8

Critical

CVSS V3

JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™