`jsonpath`

Ecosystem:
npm

Package URL:
pkg:npm/jsonpath

Total PRs:
776 Dependabot PRs

Latest PR:
13 days ago

Unique Repositories:
694 repositories

Unique Repos (30 days):
13 repositories

Security Advisories

jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

GHSA-87r5-mp6g-5w5j CVE-2026-1615 HIGH published 4 months ago • updated about 15 hours ago

### Impact **Arbitrary Code Injection (Remote Code Execution & XSS):** A critical security vulnerability affects **all versions** of the `jsonpat...

JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js

GHSA-6c59-mwgh-r2x6 CVE-2025-61140 MODERATE published 5 months ago • updated about 16 hours ago

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

Recent PRs

RSS Feed

Bump jsonpath from 1.1.1 to 1.3.0

dlep17/fsl-index #26

1.1.1 → 1.3.0 Minor PR

Open 13 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 25 updates

sam1am/auth-boilerplate #1

1.1.1 → 1.3.0 Minor PR

Open 17 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 21 updates

rorymclaughlin432/admin-dashboard-charts #2

1.1.1 → 1.3.0 Minor PR

Open 21 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

tcpipuk/maubot #32

1.1.1 → 1.3.0 Minor PR

Closed 22 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 27 updates

Kaairofelipe/ai-lab-recipes #2

1.1.1 → 1.3.0 Minor PR

Closed 23 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 25 updates

realbrodiwhite/royalgamesclient #36

1.1.1 → 1.3.0 Minor PR

Open 29 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 21 updates

dfinity/dre #2008

1.1.1 → 1.3.0 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 17 updates

GrantBirki/birki #26

1.1.1 → 1.3.0 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 8 directories with 27 updates

danielbodnar/web-ai-demos #9

1.1.1 → 1.3.0 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 5 directories with 25 updates

danielbodnar/web-ai-demos #6

1.1.1 → 1.3.0 Minor PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 1 directory with 24 updates

reaphq/iam-identity-center-team #37

1.1.1 → 1.3.0 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 24 updates

realbrodiwhite/royalgamesclient #34

1.1.1 → 1.3.0 Minor PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 28 updates

MetaMask/snap-simple-keyring #174

1.1.1 → 1.3.0 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 6 directories with 29 updates

danielbodnar/web-ai-demos #1

1.1.1 → 1.3.0 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 8 updates

codewithaustin1/sharp-portfolio #1

1.2.1 → 1.3.0 Minor PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 8 directories with 10 updates

Emadalshamery/verite #10

1.1.1 → 1.3.0 Minor PR

Open about 1 month ago 3 comments

Bump the npm_and_yarn group across 2 directories with 28 updates

halilertekin/OpenDevin #4

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.3.0 in /frontend

Zintradev/ML-Threat-Dashboard #52

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

Zintradev/ML-Threat-Dashboard #39

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 17 updates

Zintradev/ML-Threat-Dashboard #2

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 9 updates

Emadalshamery/verite #9

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 24 updates

reaphq/iam-identity-center-team #33

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.3.0 in /frontend

DaryPet/tax-consulting-app #78

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 8 updates

Aryanvirpsu/Crypton-DI #5

1.2.1 → 1.3.0 Minor PR

Open about 2 months ago 1 comment

build(frontend)(deps): bump the npm_and_yarn group across 1 directory with 13 updates

MallamTeja/MMLL #60

1.1.1 → 1.3.0 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 23 updates

realbrodiwhite/royalgamesclient #30

1.1.1 → 1.3.0 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 18 updates

akaday/AiBlender #35

1.1.1 → 1.3.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 39 updates

iDereje/badges #17

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 14 updates

Dargon789/safe-apps-sdk #182

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 20 updates

igorcretu/belotCalculator #1

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 26 updates

reaphq/iam-identity-center-team #27

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

build(deps): Bump the npm_and_yarn group across 1 directory with 11 updates

CasianBlanaru/bitv-audit-tool #128

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 3 comments

Bump the npm_and_yarn group across 7 directories with 9 updates

Silvrbckw/verite #17

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 6 directories with 22 updates

Ascalad/tonkeeper-web #4

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.3.0

Esubaalew/enimar-f #10

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 6 directories with 27 updates

dporkka/dittofeed-customer-engagement #4

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates

c6ai/langchainjs #6

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

huynguyenjv/VN-Law #13

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 10 updates

Emadalshamery/verite #5

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 17 updates

jacob-hitchcock/VolleyVibes #36

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 2 comments

Build(deps): Bump the npm_and_yarn group across 3 directories with 3 updates

butterfly-systems/grafana #251

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 18 updates

jacob-hitchcock/VolleyVibes #35

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 18 updates

EmilynnJ/soulseer-platform #3

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 5 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

loveyou001/RedisInsight #4

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

LCSOGthb/AirMerge #15

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 5 comments

chore(deps): bump the npm_and_yarn group across 5 directories with 21 updates

q1blue/dre #14

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 21 updates

loveyou001/RedisInsight #2

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 3 comments

Bump the npm_and_yarn group across 3 directories with 29 updates

dporkka/dittofeed-customer-engagement #2

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 36 updates

iDereje/badges #14

1.1.1 → 1.3.0 Minor PR

Closed 2 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.3.0

Apollon77/ioBroker.wiffi-wz #143

1.1.1 → 1.3.0 Minor PR

Open 2 months ago 1 comment

Package Details

Name:	`jsonpath`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/jsonpath`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

Query JavaScript objects with JSONPath expressions. Robust / safe JSONPath engine for Node.js.

Repository:	https://github.com/dchester/jsonpath
Homepage:	https://github.com/dchester/jsonpath#readme
Latest Release:	`1.1.1` about 5 years ago
Dependent Repos:	18,744
Dependent Packages:	1,059
Downloads:	13,549,500
Ranking:	Top 0.2086% by dependent repos Top 0.1583% by downloads Top 0.07% by dependent pkgs

PR Status

Open 299 (38.5%)

Merged 0 (0.0%)

Closed 477 (61.5%)

PR Types

Minor 753 (97.0%)

Patch 20 (2.6%)

Removal 1 (0.1%)