{"uuid": "2986948b-d720-43bf-80ff-a0ec123e2882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117136924619822381", "content": "CRITICAL: CVE-2026-77414 in jsonata-js (&lt;1.8.8, &lt;2.2.1) enables remote code execution via code injection (CWE-94). Update to 1.8.8/2.2.1 now. No workaround. Details: https://radar.offseq.com/threat/cve-2026-77414-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-247817ff13af01bb #OffSeq #CVE202677414 #infosec #security", "creation_timestamp": "2026-08-22T03:00:24.883959Z"}