`jsonpath`

Ecosystem:
npm

Package URL:
pkg:npm/jsonpath

Total PRs:
777 Dependabot PRs

Latest PR:
13 days ago

Unique Repositories:
695 repositories

Unique Repos (30 days):
7 repositories

Security Advisories

jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

GHSA-87r5-mp6g-5w5j CVE-2026-1615 HIGH published 4 months ago • updated 4 days ago

### Impact **Arbitrary Code Injection (Remote Code Execution & XSS):** A critical security vulnerability affects **all versions** of the `jsonpat...

JSONPath vulnerable to Prototype Pollution due to insufficient input validation of object keys in lib/index.js

GHSA-6c59-mwgh-r2x6 CVE-2025-61140 MODERATE published 5 months ago • updated 4 days ago

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

Recent PRs

RSS Feed

Bump the npm_and_yarn group across 1 directory with 5 updates

ParadiseSS13/Paradise #31732

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 3 directories with 7 updates

augustocristian/asw2324_0 #235

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

build(deps): bump jsonpath from 1.2.1 to 1.3.0

roebi/astro-github-api-plugin #162

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

chore(deps)(deps): bump jsonpath from 1.1.1 to 1.3.0 in /frontend

FoldedOdin/AquaChain #111

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 4 updates

dave9123/photodashboard #86

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 2 comments

build(deps): bump the npm_and_yarn group across 15 directories with 12 updates

sizzlebop/notesnook #30

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 11 updates

qenex-ai/LlamaIndexTS #60

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 10 updates

allyelvis/whatsapp-facebook-pos-system #28

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 3 directories with 3 updates

equal-shares/equal-shares #32

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump jsonpath from 1.1.1 to 1.3.0

STARTcloud/web-terminal #41

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

ControlCore-Project/concore-editor #363

1.1.1 → 1.3.0 Minor PR

Open 3 months ago 1 comment

Bump jsonpath from 1.2.1 to 1.3.0 in /frontend in the npm_and_yarn group across 1 directory

djleamen/Scrozam #50

1.2.1 → 1.3.0 Minor PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 4 updates

commercetools-demo/contentools #21

1.1.1 → 1.3.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 17 directories with 17 updates

jgeofil/hash #15

1.1.1 → 1.2.1 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 17 directories with 18 updates

jgeofil/hash #14

1.1.1 → 1.2.1 Minor PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 13 updates

Enterprise-CMCS/macpro-mdct-seds #15342

1.1.1 → 1.2.1 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 34 updates

iDereje/badges #8

1.1.1 → 1.2.1 Minor PR

Closed 3 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 33 updates

iDereje/badges #5

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 2 comments

build(deps): Bump the npm_and_yarn group across 10 directories with 17 updates

webmasterbecks/n8n #1

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 10 updates

qenex-ai/LlamaIndexTS #57

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 33 updates

axelduret/shields #5

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 3 directories with 8 updates

ivan09069/n8n #89

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 11 updates

Enterprise-CMCS/macpro-mdct-seds #15337

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 11 updates

jgeofil/TypeAgent #3

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 13 updates

qenex-ai/LlamaIndexTS #54

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 9 updates

Enterprise-CMCS/macpro-mdct-seds #15333

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

Amer2794/cli #2

1.1.1 → removed

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 12 updates

spica-engine/spica #1662

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 2 directories with 9 updates

henryperkins/dj-judas #7

1.1.1 → removed

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 10 updates

jgeofil/TypeAgent #2

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 14 directories with 17 updates

jgeofil/hash #4

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 2 comments

Bump the npm_and_yarn group across 13 directories with 23 updates

karlspace/Ghost-CMS #2

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 2 updates

feldera/feldera #5662

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump jsonpath from 1.0.2 to 1.2.1 in /plugins/insomnia-plugin-jsonpath

httpsgithu/insomnia #211

1.0.2 → 1.2.1 Minor PR

Open 4 months ago 1 comment

chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 updates

Hardonian/AI-Automated-Systems_AIAS #410

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 2 comments

Bump jsonpath from 1.1.1 to 1.2.1 in /frontend/webcoder_ui in the npm_and_yarn group across 1 directory

Prekzursil/WebCoder #3

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 7 comments

Bump jsonpath from 1.1.1 to 1.2.1

Sobanim/countries-flag #2

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 2 comments

chore: bump jsonpath from 1.1.1 to 1.2.1

CAsocialu/CAsocialu.github.io #85

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 3 comments

Bump jsonpath from 1.1.1 to 1.2.1

toby4all/my-react-app #2

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

build(deps): bump jsonpath from 1.1.1 to 1.2.1

prathoseraaj/foodfleet #1

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.2.1

JakobRechberger/signaturewebsite #4

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

build(deps): bump jsonpath from 1.1.1 to 1.2.1

rancher-sandbox/rancher-desktop #9886

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 2 comments

Bump jsonpath from 1.1.1 to 1.2.1

anudeepkotaru/portfolio #1

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

ZapracujNaPrzyszlosc/StronaInternetowaProjektu #9

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.2.1

Soham-Chatt/boulder #30

1.1.1 → 1.2.1 Minor PR

Open 4 months ago 1 comment

chore(deps): bump jsonpath from 1.1.1 to 1.2.1 in /frontend

Chen-Abudi/react-around-api-full #62

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

Bump jsonpath from 1.1.1 to 1.2.1

drfurtado/cfc2025 #3

1.1.1 → 1.2.1 Minor PR

Closed 4 months ago 1 comment

chore: bump jsonpath from 1.2.0 to 1.2.1

contentful/field-editors #2075

1.2.0 → 1.2.1 Patch PR

Closed 4 months ago 2 comments

Bump jsonpath from 1.2.0 to 1.2.1

ap-communications/platt-backstage-plugin #342

1.2.0 → 1.2.1 Patch PR

Open 4 months ago 1 comment

build(deps): Bump jsonpath from 1.2.0 to 1.2.1 in the npm_and_yarn group across 1 directory

romantech/search-times #55

1.2.0 → 1.2.1 Patch PR

Open 4 months ago 1 comment

Package Details

Name:	`jsonpath`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/jsonpath`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

Query JavaScript objects with JSONPath expressions. Robust / safe JSONPath engine for Node.js.

Repository:	https://github.com/dchester/jsonpath
Homepage:	https://github.com/dchester/jsonpath#readme
Latest Release:	`1.1.1` about 5 years ago
Dependent Repos:	18,744
Dependent Packages:	1,059
Downloads:	13,549,500
Ranking:	Top 0.2086% by dependent repos Top 0.1583% by downloads Top 0.07% by dependent pkgs

PR Status

Open 299 (38.5%)

Merged 0 (0.0%)

Closed 478 (61.5%)

PR Types

Minor 754 (97.0%)

Patch 20 (2.6%)

Removal 1 (0.1%)