https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 23 Aug 2026 16:53:34 +0000 https://vulnerability.circl.lu/sighting/cbbb1f20-dca9-436e-8dc2-607563cf1d6c/export {"uuid": "cbbb1f20-dca9-436e-8dc2-607563cf1d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53xsi22d", "content": "Daily IT Security Digest \u2014 2026-08-22\nhttps://radar.offseq.com/threat/cve-2026-77413; https://radar.offseq.com/threat/cve-2026-77414-cwe-94; https://radar.offseq.com/threat/cve-2026-77415-cwe-94\n\n## 2. Microsoft August Patch Day: 22 Vulnerabilities Fixed, ShieldBreak Zero-Day", "creation_timestamp": "2026-08-23T05:02:19.246566Z"} {"uuid": "cbbb1f20-dca9-436e-8dc2-607563cf1d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53xsi22d", "content": "Daily IT Security Digest \u2014 2026-08-22\nhttps://radar.offseq.com/threat/cve-2026-77413; https://radar.offseq.com/threat/cve-2026-77414-cwe-94; https://radar.offseq.com/threat/cve-2026-77415-cwe-94\n\n## 2. Microsoft August Patch Day: 22 Vulnerabilities Fixed, ShieldBreak Zero-Day", "creation_timestamp": "2026-08-23T05:02:19.246566Z"} https://vulnerability.circl.lu/sighting/cbbb1f20-dca9-436e-8dc2-607563cf1d6c/export Sun, 23 Aug 2026 05:02:19 +0000 https://vulnerability.circl.lu/sighting/f8b5f615-9be3-49ec-8e01-936740477229/export {"uuid": "f8b5f615-9be3-49ec-8e01-936740477229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53hn3h2s", "content": "Daily IT Security Digest \u2014 2026-08-22\nThree critical vulnerabilities (CVE-2026-77413, CVE-2026-77414, CVE-2026-77415) have been identified in the jsonata-js JavaScript library, with CVSS scores up to 9.3. The flaws involve code injection in the lookup function and object-integrity manipulation,", "creation_timestamp": "2026-08-23T05:02:18.564451Z"} {"uuid": "f8b5f615-9be3-49ec-8e01-936740477229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53hn3h2s", "content": "Daily IT Security Digest \u2014 2026-08-22\nThree critical vulnerabilities (CVE-2026-77413, CVE-2026-77414, CVE-2026-77415) have been identified in the jsonata-js JavaScript library, with CVSS scores up to 9.3. The flaws involve code injection in the lookup function and object-integrity manipulation,", "creation_timestamp": "2026-08-23T05:02:18.564451Z"} https://vulnerability.circl.lu/sighting/f8b5f615-9be3-49ec-8e01-936740477229/export Sun, 23 Aug 2026 05:02:18 +0000 https://vulnerability.circl.lu/sighting/068b5048-77f7-43f6-a8d1-de70c16bdca5/export {"uuid": "068b5048-77f7-43f6-a8d1-de70c16bdca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtn4tdvbu52r", "content": "CVE-2026-77415: CRITICAL code injection in jsonata-js (<1.8.8, <2.2.1) allows remote code execution. Upgrade to 1.8.8/2.2.1 now to prevent system compromise. Patch is available. https://radar.offseq.com/threat/cve-2026-77415-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-...", "creation_timestamp": "2026-08-22T01:30:28.536209Z"} {"uuid": "068b5048-77f7-43f6-a8d1-de70c16bdca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtn4tdvbu52r", "content": "CVE-2026-77415: CRITICAL code injection in jsonata-js (<1.8.8, <2.2.1) allows remote code execution. Upgrade to 1.8.8/2.2.1 now to prevent system compromise. Patch is available. https://radar.offseq.com/threat/cve-2026-77415-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-...", "creation_timestamp": "2026-08-22T01:30:28.536209Z"} https://vulnerability.circl.lu/sighting/068b5048-77f7-43f6-a8d1-de70c16bdca5/export Sat, 22 Aug 2026 01:30:28 +0000 https://vulnerability.circl.lu/sighting/083a6434-8831-4e4d-a1b6-db144347e0df/export {"uuid": "083a6434-8831-4e4d-a1b6-db144347e0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117136570805885368", "content": "CVE-2026-77415 (CRITICAL, CVSS 9.3) in jsonata-js (<1.8.8, <2.2.1): Attackers can chain object-integrity flaws to achieve arbitrary code execution. Patch to 1.8.8/2.2.1 ASAP. Details: https://radar.offseq.com/threat/cve-2026-77415-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-b49c30a44f0e9211 #OffSeq #jsonata #security #vuln", "creation_timestamp": "2026-08-22T01:30:26.199476Z"} {"uuid": "083a6434-8831-4e4d-a1b6-db144347e0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117136570805885368", "content": "CVE-2026-77415 (CRITICAL, CVSS 9.3) in jsonata-js (<1.8.8, <2.2.1): Attackers can chain object-integrity flaws to achieve arbitrary code execution. Patch to 1.8.8/2.2.1 ASAP. Details: https://radar.offseq.com/threat/cve-2026-77415-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-b49c30a44f0e9211 #OffSeq #jsonata #security #vuln", "creation_timestamp": "2026-08-22T01:30:26.199476Z"} https://vulnerability.circl.lu/sighting/083a6434-8831-4e4d-a1b6-db144347e0df/export Sat, 22 Aug 2026 01:30:26 +0000 https://vulnerability.circl.lu/sighting/ab9d0066-c4cf-4687-b107-628882f104c2/export {"uuid": "ab9d0066-c4cf-4687-b107-628882f104c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmyvhpe5o2p", "content": "CVE-2026-77415 - jsonata\nThe JSONata data\u2011mapping tool versions before 2.2.1 and 1.8.8 let specially crafted expressions change how the software works and run any code the attacker wants. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonata #jsonatajs #npm #CVE #infosec", "creation_timestamp": "2026-08-22T00:20:03.998593Z"} {"uuid": "ab9d0066-c4cf-4687-b107-628882f104c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmyvhpe5o2p", "content": "CVE-2026-77415 - jsonata\nThe JSONata data\u2011mapping tool versions before 2.2.1 and 1.8.8 let specially crafted expressions change how the software works and run any code the attacker wants. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonata #jsonatajs #npm #CVE #infosec", "creation_timestamp": "2026-08-22T00:20:03.998593Z"} https://vulnerability.circl.lu/sighting/ab9d0066-c4cf-4687-b107-628882f104c2/export Sat, 22 Aug 2026 00:20:03 +0000 https://vulnerability.circl.lu/sighting/d2558d6e-38ed-485e-b9ff-7a3cd26cf7ec/export {"uuid": "d2558d6e-38ed-485e-b9ff-7a3cd26cf7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T00:00:24.256911Z"} {"uuid": "d2558d6e-38ed-485e-b9ff-7a3cd26cf7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T00:00:24.256911Z"} https://vulnerability.circl.lu/sighting/d2558d6e-38ed-485e-b9ff-7a3cd26cf7ec/export Sat, 22 Aug 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/b96065b7-f0fc-4818-b87c-efdc0c1911e1/export {"uuid": "b96065b7-f0fc-4818-b87c-efdc0c1911e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtmw5oox6y25", "content": "JSONata patched arbitrary code execution reachable from a crafted expression: `$clone` could be overwritten to mutate objects through transforms, and jsonata functions such as `$merge.*` could be destructured. Fixed in 2.2.1 and 1.8.8. CVE-2026-77415 #dev", "creation_timestamp": "2026-08-21T23:30:58.688747Z"} {"uuid": "b96065b7-f0fc-4818-b87c-efdc0c1911e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtmw5oox6y25", "content": "JSONata patched arbitrary code execution reachable from a crafted expression: `$clone` could be overwritten to mutate objects through transforms, and jsonata functions such as `$merge.*` could be destructured. Fixed in 2.2.1 and 1.8.8. CVE-2026-77415 #dev", "creation_timestamp": "2026-08-21T23:30:58.688747Z"} https://vulnerability.circl.lu/sighting/b96065b7-f0fc-4818-b87c-efdc0c1911e1/export Fri, 21 Aug 2026 23:30:58 +0000 https://vulnerability.circl.lu/sighting/31e687f5-b521-4940-8888-26839a945993/export {"uuid": "31e687f5-b521-4940-8888-26839a945993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77415", "type": "published-proof-of-concept", "source": "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff", "content": "", "creation_timestamp": "2026-08-21T22:35:03.682831Z"} {"uuid": "31e687f5-b521-4940-8888-26839a945993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77415", "type": "published-proof-of-concept", "source": "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff", "content": "", "creation_timestamp": "2026-08-21T22:35:03.682831Z"} https://vulnerability.circl.lu/sighting/31e687f5-b521-4940-8888-26839a945993/export Fri, 21 Aug 2026 22:35:03 +0000 https://vulnerability.circl.lu/sighting/f25bbe52-c0a9-4d42-abbc-084d7795e544/export {"uuid": "f25bbe52-c0a9-4d42-abbc-084d7795e544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-21T22:31:20.611521Z"} {"uuid": "f25bbe52-c0a9-4d42-abbc-084d7795e544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-21T22:31:20.611521Z"} https://vulnerability.circl.lu/sighting/f25bbe52-c0a9-4d42-abbc-084d7795e544/export Fri, 21 Aug 2026 22:31:20 +0000 https://vulnerability.circl.lu/sighting/b14d5426-6f5f-4d56-8677-3a98fe212197/export {"uuid": "b14d5426-6f5f-4d56-8677-3a98fe212197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmrk2e5qb2u", "content": "\ud83d\udea8 CVE-2026-77415 \u2014 CVSS 9.3 CRITICAL\n\nJSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:08:43.114310Z"} {"uuid": "b14d5426-6f5f-4d56-8677-3a98fe212197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmrk2e5qb2u", "content": "\ud83d\udea8 CVE-2026-77415 \u2014 CVSS 9.3 CRITICAL\n\nJSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:08:43.114310Z"} https://vulnerability.circl.lu/sighting/b14d5426-6f5f-4d56-8677-3a98fe212197/export Fri, 21 Aug 2026 22:08:43 +0000