{"uuid": "8cc5e679-03c2-46a9-87a1-c57cbe7d1250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77413", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137278608318337", "content": "jsonata-js (<1.8.8, <2.2.0) is affected by CRITICAL CVE-2026-77413 (CVSS 9.3) due to a code injection flaw in the lookup function. Attackers can execute arbitrary code remotely. Upgrade to 1.8.8 or 2.2.0+ ASAP. https://radar.offseq.com/threat/cve-2026-77413-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-43a95a44c76d7f7e #OffSeq #CVE #infosec #security", "creation_timestamp": "2026-08-22T04:30:26.527794Z"}