{"uuid": "b96065b7-f0fc-4818-b87c-efdc0c1911e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtmw5oox6y25", "content": "JSONata patched arbitrary code execution reachable from a crafted expression: `$clone` could be overwritten to mutate objects through transforms, and jsonata functions such as `$merge.*` could be destructured. Fixed in 2.2.1 and 1.8.8. CVE-2026-77415 #dev", "creation_timestamp": "2026-08-21T23:30:58.688747Z"}