{"uuid": "9f8e2884-b2c6-41f8-96b5-2dd74c6e7222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77414", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmydmz5uq2f", "content": "CVE-2026-77414 - jsonata\nThe JSONata JavaScript library in versions earlier than 2.2.1 (and earlier than 1.8.8) can be tricked into running any command an attacker supplies. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonata #jsonatajs #npm #CVE #infosec", "creation_timestamp": "2026-08-22T00:10:05.185146Z"}