https://vulnerability.circl.lu/sightings/feed 2026-08-23T20:25:45.146390+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/482f342c-7378-40de-bf91-fffaf3ff5846/export 2026-08-23T20:25:45.157054+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "482f342c-7378-40de-bf91-fffaf3ff5846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-66mm-25pp-rfff", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T00:00:24.227771Z"} 2026-08-22T00:00:24.227771+00:00 https://vulnerability.circl.lu/sighting/11453e61-d7e4-45df-ba95-6efabd42129f/export 2026-08-23T20:25:45.159656+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "11453e61-d7e4-45df-ba95-6efabd42129f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-66mm-25pp-rfff", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtmw5pmwz62y", "content": "https://github.com/advisories/GHSA-66mm-25pp-rfff\nmore like this: https://standup.kynth.studio/?utm_source=standup-bluesky&utm_medium=social", "creation_timestamp": "2026-08-21T23:30:59.315842Z"} 2026-08-21T23:30:59.315842+00:00 https://vulnerability.circl.lu/sighting/0ca41f21-e7d6-409c-98a6-86d9a97c58b9/export 2026-08-23T20:25:45.159798+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0ca41f21-e7d6-409c-98a6-86d9a97c58b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-66mm-25pp-rfff", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-21T22:31:20.586671Z"} 2026-08-21T22:31:20.586671+00:00