Skip to content
OpenAdvisories

Package · npm

jsonata

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-52746

    JSONata: Malicious inputs to "$toMillis" function can cause resource exhaustion

    JSONata is a JSON query and transformation language. Prior to 2.2.0 and 1.8.9, malicious non-matching inputs to the $toMillis function can cause superlinear backtracking in the ISO-8601 validation regex, leading to denial of service in applications that evalu…

    jsonata-js jsonata jsonata npm