`jsonpath`

Ecosystem:
npm

Package URL:
pkg:npm/jsonpath

Total PRs:
777 Dependabot PRs

Latest PR:
11 days ago

Unique Repositories:
695 repositories

Unique Repos (30 days):
7 repositories

Security Advisories

jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

GHSA-87r5-mp6g-5w5j CVE-2026-1615 HIGH published 4 months ago • updated 2 days ago

### Impact **Arbitrary Code Injection (Remote Code Execution & XSS):** A critical security vulnerability affects **all versions** of the `jsonpat...

JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js

GHSA-6c59-mwgh-r2x6 CVE-2025-61140 MODERATE published 5 months ago • updated 2 days ago

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

Recent PRs

RSS Feed

Bump jsonpath from 1.1.1 to 1.3.0

Apollon77/ioBroker.wiffi-wz #143

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.3.0 in /frontend/webcoder_ui

Prekzursil/WebCoder #38

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 3 comments

build(deps): bump jsonpath from 1.1.1 to 1.3.0

wmfs/tymly-cardscript-plugin #868

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump jsonpath from 1.2.1 to 1.3.0

mathieu-benoit/deploy-backstage-with-score #367

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

Bump jsonpath from 1.1.1 to 1.3.0

merchantprotocol/sulla-desktop #298

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

chore(deps): bump jsonpath from 1.2.1 to 1.3.0 in /frontend

Chen-Abudi/react-around-api-full #75

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

soham2008xyz/Flow_NFTs_IPFS #126

1.2.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

bmordue/redweed #115

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 18 updates

gs-gs/untp-demo-instance #24

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

ParadiseSS13/Paradise #31768

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

sharma-manish-94/schemasculpt #61

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 10 updates

SandeepVashishtha/Code-Editor #39

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

chore(deps-dev): bump jsonpath from 1.1.1 to 1.3.0

pactflow/pactflow-load-test #19

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

build(deps): bump jsonpath from 1.2.1 to 1.3.0 in /client

cristian-hr/PostAPP #35

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

build(deps): bump jsonpath from 1.2.1 to 1.3.0

kskonovalov/Travel-checklist #66

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 10 updates

alokkulkarni/ephemeralenvironments #84

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 18 directories with 19 updates

jgeofil/hash #25

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 3 comments

chore(deps): bump jsonpath from 1.2.1 to 1.3.0 in /ui

numaproj/numaflow #3326

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 6 directories with 18 updates

idgrou/n8n #34

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 14 updates

Dargon789/safe-apps-sdk #177

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 3 comments

Bump jsonpath from 1.2.1 to 1.3.0 in the npm_and_yarn group across 1 directory

casonas/macha-assessment #3

1.2.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.3.0 in /static-webapp

onlexnet/sin-net-reports #468

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 16 directories with 18 updates

jgeofil/hash #21

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 5 directories with 10 updates

allyelvis/whatsapp-facebook-pos-system #32

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 9 updates

alokkulkarni/ephemeralenvironments #82

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 18 updates

spica-engine/spica #1719

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 34 updates

iDereje/badges #10

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 17 updates

Van-sh/Grocery-Planner #100

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 10 directories with 16 updates

AKJUS/taral #23

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 19 updates

vinnub143/QuarterBack_BackStage_Sec_Testing #11

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

ZapracujNaPrzyszlosc/project-website #13

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Build(deps): Bump the npm_and_yarn group across 2 directories with 3 updates

maxonary/convitelist #119

1.2.0 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 16 directories with 17 updates

jgeofil/hash #19

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

not-a-ethan/React-practice #8

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 3 updates

K1ngHandy/Profile-View #23

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 22 updates

q1blue/dre #6

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 3 updates

vadimgierko/chat-app-react #38

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 15 updates

akaday/AiBlender #27

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

DhanushNehru/CustomCodeEditor #226

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 7 updates

melodee-project/meloamp #5

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 20 updates

gs-gs/untp-demo-instance #18

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 8 updates

augustocristian/asw2324_0 #237

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 16 directories with 17 updates

jgeofil/hash #18

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 11 updates

allyelvis/whatsapp-facebook-pos-system #29

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

nrk8286/DeepSight-OSINT-Pro #19

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 4 comments

Bump the npm_and_yarn group across 17 directories with 17 updates

jgeofil/hash #17

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 3 comments

Bump jsonpath and @cdklabs/cdk-ssm-documents in /source

aws-solutions/automated-security-response-on-aws #284

removed Removal PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 4 updates

nvnsudharsan/nvnsudharsan.github.io #12

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 6 directories with 26 updates

alokkulkarni/backstage #13

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 11 updates

openfort-xyz/ecosystem-sample #31

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Package Details

Name:	`jsonpath`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/jsonpath`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

Query JavaScript objects with JSONPath expressions. Robust / safe JSONPath engine for Node.js.

Repository:	https://github.com/dchester/jsonpath
Homepage:	https://github.com/dchester/jsonpath#readme
Latest Release:	`1.1.1` about 5 years ago
Dependent Repos:	18,744
Dependent Packages:	1,059
Downloads:	13,549,500
Ranking:	Top 0.2086% by dependent repos Top 0.1583% by downloads Top 0.07% by dependent pkgs

PR Status

Open 299 (38.5%)

Merged 0 (0.0%)

Closed 478 (61.5%)

PR Types

Minor 754 (97.0%)

Patch 20 (2.6%)

Removal 1 (0.1%)