Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

jsonpath-plus

Ecosystem:
npm
Package URL:
pkg:npm/jsonpath-plus
Total PRs:
275 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
206 repositories
Unique Repos (30 days):
27 repositories
Security Advisories
JSONPath Plus allows Remote Code Execution
GHSA-hw8r-x6gr-5gjp CVE-2025-1302 HIGH published about 1 year ago • updated 1 day ago
Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker c...
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump jsonpath-plus from 10.0.0 to 10.0.7

Azure/oav #1056

10.0.0 → 10.0.7 Patch PR
Open over 1 year ago 3 comments
Azure
Package Details
Name: jsonpath-plus
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/jsonpath-plus
JSON API: View JSON
Security Advisories

1

Active advisories
HIGH 1
View All npm Advisories
Package Information
Description:

A JS implementation of JSONPath with some additional operators

Repository: https://github.com/s3u/JSONPath
Homepage: https://github.com/s3u/JSONPath
Latest Release: 10.3.0
about 1 year ago
Dependent Repos: 23,144
Dependent Packages: 544
Downloads: 22,694,826
Ranking: Top 0.195% by dependent repos Top 0.0882% by downloads Top 0.118% by dependent pkgs
PR Status
Open 153 (55.6%)
Merged 29 (10.5%)
Closed 71 (25.8%)
PR Types
Removal 8 (2.9%)
Minor 119 (43.3%)
Major 120 (43.6%)
Patch 1 (0.4%)