Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

jsonpath-plus

Ecosystem:
npm
Package URL:
pkg:npm/jsonpath-plus
Total PRs:
286 Dependabot PRs
Latest PR:
25 days ago
Unique Repositories:
216 repositories
Unique Repos (30 days):
1 repository
Security Advisories
JSONPath Plus allows Remote Code Execution
GHSA-hw8r-x6gr-5gjp CVE-2025-1302 HIGH published over 1 year ago • updated 9 days ago
Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker c...
Recent PRs (filtered by: Closed , Patch PRs )
RSS Feed Clear filter
Package Details
Name: jsonpath-plus
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/jsonpath-plus
JSON API: View JSON
Security Advisories

1

Active advisories
HIGH 1
View All npm Advisories
Package Information
Description:

A JS implementation of JSONPath with some additional operators

Repository: https://github.com/s3u/JSONPath
Homepage: https://github.com/s3u/JSONPath
Latest Release: 10.3.0
over 1 year ago
Dependent Repos: 23,144
Dependent Packages: 544
Downloads: 22,694,826
Ranking: Top 0.195% by dependent repos Top 0.0882% by downloads Top 0.118% by dependent pkgs
PR Status
Open 157 (54.9%)
Merged 29 (10.1%)
Closed 78 (27.3%)
PR Types
Major 122 (42.7%)
Minor 128 (44.8%)
Patch 1 (0.3%)
Removal 8 (2.8%)