{"schemaVersion":3,"id":"CVE-2025-1302","aliases":["CGA-2g57-9w4j-fr4f","CGA-37f7-3hc6-6mm3","CGA-45wv-9cc8-qq8m","CGA-4r45-rpxq-3rwf","CGA-4xh7-cr4w-ppp8","CGA-598w-42qh-f6m5","CGA-6p95-g654-7739","CGA-7qmh-4hqx-hxqq","CGA-7vf3-p82f-78v5","CGA-8f33-v5wq-85x9","CGA-959h-wx43-5p6r","CGA-cx4j-6hc9-67p9","CGA-fvjj-crpp-r865","CGA-hc39-vfjw-gc6f","CGA-hrvh-j3xf-8p2q","CGA-hvx7-qp4p-3x45","CGA-j52v-w327-hwpv","CGA-q7f7-xxr9-8wc2","CGA-r9q2-458q-vp2c","CGA-rg8h-93ff-vmw3","CGA-rq39-h936-j95w","CGA-w272-2857-jx8w","CGA-w44j-jff4-q3mh","CGA-x78x-v4cr-6897","CGA-xhrg-8g85-mhm5","CGA-xmhm-787m-hw89","GHSA-hw8r-x6gr-5gjp"],"status":"published","duplicateOf":null,"title":null,"description":"Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode.\n\n**Note:**\n\nThis is caused by an incomplete fix for [CVE-2024-21534](https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884).","dates":{"published":"2025-02-15T05:00:01.061Z","modified":"2025-02-18T20:32:41.833Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":10,"impact":9.8,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":9.3,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.10395,"percentile":0.95699,"severity":"medium","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.10395},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.10395,"percentile":0.95699}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.10395,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.10395,"percentile":0.95699}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-94","name":"Improper Control of Generation of Code ('Code Injection')","description":"The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/94.html"}],"affected":[{"vendor":"chainguard","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.9.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.15.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prism","name":"prism","label":"prism","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prism","purlType":"apk","versions":[{"text":"< 5.12.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.12.1-r4","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"katib-earlystopping","name":"katib-earlystopping","label":"katib-earlystopping","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-earlystopping","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-goptuna-compat","name":"katib-suggestion-goptuna-compat","label":"katib-suggestion-goptuna-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-goptuna-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperband","name":"katib-suggestion-hyperband","label":"katib-suggestion-hyperband","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperband","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-hyperopt","name":"katib-suggestion-hyperopt","label":"katib-suggestion-hyperopt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-hyperopt","purlType":"apk","versions":[{"text":"< 0.19.0-r40","noFixRecorded":false,"fixedIn":null},{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r40 | < 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-darts","name":"katib-suggestion-nas-darts","label":"katib-suggestion-nas-darts","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-darts","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-nas-enas","name":"katib-suggestion-nas-enas","label":"katib-suggestion-nas-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-nas-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-optuna-enas","name":"katib-suggestion-optuna-enas","label":"katib-suggestion-optuna-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-optuna-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-pbt-enas","name":"katib-suggestion-pbt-enas","label":"katib-suggestion-pbt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-pbt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-suggestion-skopt-enas","name":"katib-suggestion-skopt-enas","label":"katib-suggestion-skopt-enas","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-suggestion-skopt-enas","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"katib-tfevent-metricscollector","name":"katib-tfevent-metricscollector","label":"katib-tfevent-metricscollector","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/katib-tfevent-metricscollector","purlType":"apk","versions":[{"text":"< 0.19.0-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.19.0-r31","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-centraldashboard","name":"kubeflow-centraldashboard","label":"kubeflow-centraldashboard","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-centraldashboard","purlType":"apk","versions":[{"text":"< 1.9.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.2-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.15.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.15.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prism","name":"prism","label":"prism","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prism","purlType":"apk","versions":[{"text":"< 5.12.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.12.1-r4","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"Npm","product":"jsonpath-plus","name":"jsonpath-plus","label":"jsonpath-plus","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/jsonpath-plus","purlType":"npm","versions":[{"text":"< 10.3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.3.0","eol":null,"hubHref":null}],"affectedCount":27,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-8719585","label":"security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-8719585","hostname":"security.snyk.io","tags":["WEB"]},{"url":"https://gist.github.com/nickcopi/11ba3cb4fdee6f89e02e6afae8db6456","label":"gist.github.com/nickcopi/11ba3cb4fdee6f89e02e6afae8db6456","hostname":"gist.github.com","tags":["WEB"]},{"url":"https://github.com/JSONPath-Plus/JSONPath/blob/8e4acf8aff5f446aa66323e12394ac5615c3b260/src/Safe-Script.js%23L127","label":"github.com/JSONPath-Plus/…","hostname":"github.com","tags":["WEB"]},{"url":"https://github.com/JSONPath-Plus/JSONPath/commit/30942896d27cb8a806b965a5ca9ef9f686be24ee","label":"github.com/JSONPath-Plus/JSONPath/commit/30942896d27cb8a806b965a5ca9ef9f686be24ee","hostname":"github.com","tags":["FIX","WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1302.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/1xxx/CVE-2025-1302.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1302","label":"nvd.nist.gov/vuln/detail/CVE-2025-1302","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21534","label":"nvd.nist.gov/vuln/detail/CVE-2024-21534","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/JSONPath-Plus/JSONPath","label":"github.com/JSONPath-Plus/JSONPath","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/JSONPath-Plus/JSONPath/blob/8e4acf8aff5f446aa66323e12394ac5615c3b260/src/Safe-Script.js#L127","label":"github.com/JSONPath-Plus/JSONPath/blob/8e4acf8aff5f446aa66323e12394ac5615c3b260/src/Safe-Script.js","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-59F4-CWWH-MH74","CGA-8M2R-Q5JC-7HQP","CGA-C92G-GHGC-MC7F"]},"timeline":[{"kind":"published","date":"2025-02-15T05:00:01.061Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-02-18T20:32:41.833Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T21:19:44.563Z","stale":false,"partial":false}}