{"vulnerability": "cve-2026-7741", "sightings": [{"uuid": "f881c81c-410c-40b4-96ab-e3c55cbad670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkzjglb4cv2i", "content": "CVE-2026-7741 - CodeAstro Online Classroom studentlogin sql injection\nCVE ID : CVE-2026-7741\n \n Published : May 4, 2026, 8:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : A vulnerability was detected in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the f...", "creation_timestamp": "2026-05-04T11:01:11.054961Z"}, {"uuid": "2986948b-d720-43bf-80ff-a0ec123e2882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77414", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117136924619822381", "content": "CRITICAL: CVE-2026-77414 in jsonata-js (<1.8.8, <2.2.1) enables remote code execution via code injection (CWE-94). Update to 1.8.8/2.2.1 now. No workaround. Details: https://radar.offseq.com/threat/cve-2026-77414-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-247817ff13af01bb #OffSeq #CVE202677414 #infosec #security", "creation_timestamp": "2026-08-22T03:00:24.883959Z"}, {"uuid": "1a1952a6-b0df-4825-9c4b-82be2a0c07f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77414", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtnbualpi72n", "content": "CVE-2026-77414 in jsonata-js (<1.8.8, <2.2.1): CRITICAL code injection risk \u26a1\ufe0f \u2014 remote attackers can execute arbitrary code. Patch to 1.8.8/2.2.1 now. https://radar.offseq.com/threat/cve-2026-77414-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-247817ff13af01b...", "creation_timestamp": "2026-08-22T03:00:27.355022Z"}, {"uuid": "8cc5e679-03c2-46a9-87a1-c57cbe7d1250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77413", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117137278608318337", "content": "jsonata-js (<1.8.8, <2.2.0) is affected by CRITICAL CVE-2026-77413 (CVSS 9.3) due to a code injection flaw in the lookup function. Attackers can execute arbitrary code remotely. Upgrade to 1.8.8 or 2.2.0+ ASAP. https://radar.offseq.com/threat/cve-2026-77413-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-43a95a44c76d7f7e #OffSeq #CVE #infosec #security", "creation_timestamp": "2026-08-22T04:30:26.527794Z"}, {"uuid": "b54bba00-bdd8-407b-8e70-74726a305fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77413", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtngv7w4u22x", "content": "CRITICAL: jsonata-js (<1.8.8, <2.2.0) vulnerable to code injection (CVE-2026-77413). Attackers can run arbitrary code. Upgrade to 1.8.8/2.2.0+ now. https://radar.offseq.com/threat/cve-2026-77413-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-43a95a44c76d7f7e #O...", "creation_timestamp": "2026-08-22T04:30:28.596753Z"}, {"uuid": "efbabe39-3886-4902-a9ba-e4b6a2f279f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77414", "type": "seen", "source": "https://gist.github.com/alon710/c3aaed90ea510257bc4b82da4dd81787", "content": "# CVE-2026-77414: CVE-2026-77414: Critical Sandbox Escape and Remote Code Execution in JSONata via Prototype Pollution\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77414\n\n## Summary\nCVE-2026-77414 (GHSA-2943-5xfg-gq5f) is a critical sandbox escape and remote code execution vulnerability in the JSONata package. When JSONata processes untrusted expressions, it uses a vulnerable environment lookup check that can be shadowed by user-defined variables. Attackers can leverage this to traverse the prototype chain, reach the global Function constructor, and execute arbitrary system commands on the host machine.\n\n## TL;DR\nA critical vulnerability in JSONata permits attackers to bypass query sandbox isolation and achieve remote code execution by shadowing local lookup methods and traversing the prototype chain.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS v4.0**: 9.3 (Critical)\n- **Impact**: Remote Code Execution (RCE) / Sandbox Escape\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- JSONata npm package versions < 1.8.8 and >= 2.0.0 < 2.2.1\n- Node.js applications evaluating arbitrary or untrusted user-supplied JSONata query expressions\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0 < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade JSONata library dependency to secure releases.\n- Isolate expression evaluation inside low-privilege sandboxes (e.g., gVisor, Firecracker).\n- Sanitize or reject expressions that contain dynamic property shadow mappings.\n\n**Remediation Steps:**\n1. Identify all uses of the jsonata package in package.json and lockfiles.\n2. For JSONata 1.x, update the package dependency to version 1.8.8.\n3. For JSONata 2.x, update the package dependency to version 2.2.1.\n4. Run npm install or yarn install to apply the updates.\n5. Verify deployment using automated security scans or unit tests simulating the prototype traversal payload.\n\n## References\n\n- [JSONata Security Advisory GHSA-2943-5xfg-gq5f](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-2943-5xfg-gq5f)\n- [JSONata Pull Request #799 - Mitigate Prototype Pollution and Sandbox Traversal](https://github.com/jsonata-js/jsonata/pull/799)\n- [JSONata Fix Commit 59e2514](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [JSONata Release Commit v2.2.1](https://github.com/jsonata-js/jsonata/commit/06fc08cacff16315edddec9632e98c8c7342785b)\n- [JSONata Release Announcement v1.8.8](https://github.com/jsonata-js/jsonata/releases/tag/v1.8.8)\n- [JSONata Release Announcement v2.2.1](https://github.com/jsonata-js/jsonata/releases/tag/v2.2.1)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77414) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-21T21:32:06.152219Z"}, {"uuid": "cdd1b3a5-d59c-4519-841d-8bb9dab8e30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77413", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmrjjdpmb2m", "content": "\ud83d\udea8 CVE-2026-77413 \u2014 CVSS 9.3 CRITICAL\n\nJSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.0, the src/functions.js lookup ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77413\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:08:09.481952Z"}, {"uuid": "e227a751-4311-416a-90ae-b9499de66fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77414", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmrjrjqer2m", "content": "\ud83d\udea8 CVE-2026-77414 \u2014 CVSS 9.3 CRITICAL\n\nJSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, the src/jsonata.js environme...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77414\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:08:39.637827Z"}, {"uuid": "b14d5426-6f5f-4d56-8677-3a98fe212197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmrk2e5qb2u", "content": "\ud83d\udea8 CVE-2026-77415 \u2014 CVSS 9.3 CRITICAL\n\nJSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-77415\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:08:43.114310Z"}, {"uuid": "f25bbe52-c0a9-4d42-abbc-084d7795e544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-21T22:31:20.611521Z"}, {"uuid": "31e687f5-b521-4940-8888-26839a945993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77415", "type": "published-proof-of-concept", "source": "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff", "content": "", "creation_timestamp": "2026-08-21T22:35:03.682831Z"}, {"uuid": "d3e79491-1a7d-45db-8c1f-c96bd1611722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77414", "type": "published-proof-of-concept", "source": "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-2943-5xfg-gq5f", "content": "", "creation_timestamp": "2026-08-21T22:35:05.924863Z"}, {"uuid": "587dcbea-d4d9-4027-a7c6-a2805de8c5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-77413", "type": "published-proof-of-concept", "source": "https://github.com/jsonata-js/jsonata/security/advisories/GHSA-8gq3-vp5j-2grp", "content": "", "creation_timestamp": "2026-08-21T22:35:10.405450Z"}, {"uuid": "b96065b7-f0fc-4818-b87c-efdc0c1911e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mtmw5oox6y25", "content": "JSONata patched arbitrary code execution reachable from a crafted expression: `$clone` could be overwritten to mutate objects through transforms, and jsonata functions such as `$merge.*` could be destructured. Fixed in 2.2.1 and 1.8.8. CVE-2026-77415 #dev", "creation_timestamp": "2026-08-21T23:30:58.688747Z"}, {"uuid": "d2558d6e-38ed-485e-b9ff-7a3cd26cf7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://gist.github.com/alon710/20a50aebfd35291a76583a04e09e8467", "content": "# CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77415\n\n## Summary\nA critical sandbox escape vulnerability in JSONata versions prior to 1.8.8 and 2.2.1 allows unauthenticated remote attackers to execute arbitrary code on the host machine. By submitting crafted JSONata expressions, an attacker can manipulate internal AST structures, bypass object clone helpers, spoof native function flags, and escape the evaluation environment to execute system commands through the Node.js runtime.\n\n## TL;DR\nCVE-2026-77415 is a critical sandbox escape in JSONata enabling remote code execution by chaining object-integrity and prototype-related weaknesses to hijack internal AST structures.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94: Improper Control of Generation of Code ('Code Injection')\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0**: 9.3 (Critical)\n- **Exploit Status**: Proof-of-Concept Primitives Documented\n- **KEV Status**: Not Listed\n- **Affected Versions**: < 1.8.8, >= 2.0.0, < 2.2.1\n\n## Affected Systems\n\n- JSONata NPM package (jsonata)\n- **jsonata**: < 1.8.8 (Fixed in: `1.8.8`)\n- **jsonata**: >= 2.0.0, < 2.2.1 (Fixed in: `2.2.1`)\n\n## Mitigation\n\n- Upgrade jsonata package to 1.8.8 (v1) or 2.2.1 (v2)\n- Implement execution limits including stack depth and computation timeouts\n- Isolate host environment runtimes within read-only, unprivileged container environments\n\n**Remediation Steps:**\n1. Identify all occurrences of the jsonata dependency across development and production packages\n2. Update package.json dependencies to reference 'jsonata': '^2.2.1' or '^1.8.8'\n3. Run 'npm install' or 'yarn install' to pull the latest security patches\n4. Audit dependency locks using 'npm audit' or 'yarn audit' to verify patch resolution\n5. Configure compilation options with limits on execution time and stack size within software modules\n\n## References\n\n- [CVE-2026-77415 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-77415)\n- [GitHub Security Advisory GHSA-66mm-25pp-rfff](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-66mm-25pp-rfff)\n- [Official Fix Commit - v2 Prototype Hardening](https://github.com/jsonata-js/jsonata/commit/59e25144fc3b7125f6befd71b8a6e14e1fa610d2)\n- [Official Fix Commit - v2 Wildcard Filtering](https://github.com/jsonata-js/jsonata/commit/47c0e58542202c705726663166dbee5fcae47d06)\n- [Official Fix Commit - v2 Flag Blocking](https://github.com/jsonata-js/jsonata/commit/f174348c7fa30f271b63ddedf0767e814004bc4d)\n- [Official Fix Commit - v1 Backport Hardening](https://github.com/jsonata-js/jsonata/commit/f09df8416eab8ff44926fc6527c80fb8701de159)\n- [Official Fix Commit - v1 Backport Implementation](https://github.com/jsonata-js/jsonata/commit/4b217d514376e30cba278941298d7ba97c4a6c6e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77415) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T00:00:24.256911Z"}, {"uuid": "fa61a637-a555-477e-bc67-f4b02efc4b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77413", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmydloav52y", "content": "CVE-2026-77413 - jsonata\nVersions of the JSONata library older than 2.2.0 and 1.8.8 allow specially formed expressions to run any code on the server. An attacker who can supply a JSONata expression could execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonata #npm #CVE #infosec", "creation_timestamp": "2026-08-22T00:10:04.280318Z"}, {"uuid": "9f8e2884-b2c6-41f8-96b5-2dd74c6e7222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77414", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmydmz5uq2f", "content": "CVE-2026-77414 - jsonata\nThe JSONata JavaScript library in versions earlier than 2.2.1 (and earlier than 1.8.8) can be tricked into running any command an attacker supplies. This could let an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonata #jsonatajs #npm #CVE #infosec", "creation_timestamp": "2026-08-22T00:10:05.185146Z"}, {"uuid": "ab9d0066-c4cf-4687-b107-628882f104c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmyvhpe5o2p", "content": "CVE-2026-77415 - jsonata\nThe JSONata data\u2011mapping tool versions before 2.2.1 and 1.8.8 let specially crafted expressions change how the software works and run any code the attacker wants. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#jsonata #jsonatajs #npm #CVE #infosec", "creation_timestamp": "2026-08-22T00:20:03.998593Z"}, {"uuid": "083a6434-8831-4e4d-a1b6-db144347e0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117136570805885368", "content": "CVE-2026-77415 (CRITICAL, CVSS 9.3) in jsonata-js (<1.8.8, <2.2.1): Attackers can chain object-integrity flaws to achieve arbitrary code execution. Patch to 1.8.8/2.2.1 ASAP. Details: https://radar.offseq.com/threat/cve-2026-77415-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-js-jsonata-b49c30a44f0e9211 #OffSeq #jsonata #security #vuln", "creation_timestamp": "2026-08-22T01:30:26.199476Z"}, {"uuid": "068b5048-77f7-43f6-a8d1-de70c16bdca5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtn4tdvbu52r", "content": "CVE-2026-77415: CRITICAL code injection in jsonata-js (<1.8.8, <2.2.1) allows remote code execution. Upgrade to 1.8.8/2.2.1 now to prevent system compromise. Patch is available. https://radar.offseq.com/threat/cve-2026-77415-cwe-94-improper-control-of-generation-of-code-code-injection-in-jsonata-...", "creation_timestamp": "2026-08-22T01:30:28.536209Z"}, {"uuid": "d23bea55-b214-49ca-96d4-c78cc7f309bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77413", "type": "seen", "source": "https://gist.github.com/alon710/1b32b1920b2d1520540a780d7d0490bd", "content": "# CVE-2026-77413: CVE-2026-77413: Remote Code Execution via Prototype Chain Bypass in JSONata Evaluator\n\n> **CVSS Score:** 9.3\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-77413\n\n## Summary\nA critical prototype pollution and sandbox escape vulnerability was discovered in the JSONata query and transformation library before versions 1.8.8 and 2.2.0. By providing a malicious JSONata expression that bypasses ownership checks on object properties, remote attackers can execute arbitrary code in the context of the host Node.js application.\n\n## TL;DR\nUnauthenticated remote code execution vulnerability in JSONata via prototype lookup chain traversal.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.3 (Critical)\n- **EPSS Score**: N/A\n- **Impact**: Unauthenticated Remote Code Execution\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- jsonata npm package\n- Node.js applications evaluating untrusted JSONata queries\n\n## Mitigation\n\n- Upgrade JSONata to latest version (1.8.8+ or 2.2.0+)\n- Enable execution timeouts and stack limits\n- Sanitize and validate untrusted JSONata expressions before execution\n\n**Remediation Steps:**\n1. Identify all projects running vulnerable versions of jsonata.\n2. Execute 'npm install jsonata@latest' to update to a secure version.\n3. Integrate execution guardrails like execution timeout and stack depth limit options in the JSONata configuration when evaluating user input.\n\n## References\n\n- [GHSA-8gq3-vp5j-2grp](https://github.com/jsonata-js/jsonata/security/advisories/GHSA-8gq3-vp5j-2grp)\n- [NVD Detail - CVE-2026-77413](https://nvd.nist.gov/vuln/detail/CVE-2026-77413)\n- [CVE.org - CVE-2026-77413](https://www.cve.org/CVERecord?id=CVE-2026-77413)\n- [JSONata v1.8.8 Release Notes](https://github.com/jsonata-js/jsonata/releases/tag/v1.8.8)\n- [JSONata v2.2.0 Release Notes](https://github.com/jsonata-js/jsonata/releases/tag/v2.2.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-77413) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T01:32:06.828249Z"}, {"uuid": "45e16cac-3a2f-43a9-be57-cbc85415d9e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77413", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53hn3h2s", "content": "Daily IT Security Digest \u2014 2026-08-22\nThree critical vulnerabilities (CVE-2026-77413, CVE-2026-77414, CVE-2026-77415) have been identified in the jsonata-js JavaScript library, with CVSS scores up to 9.3. The flaws involve code injection in the lookup function and object-integrity manipulation,", "creation_timestamp": "2026-08-23T05:02:18.465831Z"}, {"uuid": "bba9ae9f-f6cd-47bb-ad56-87c674322938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77414", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53hn3h2s", "content": "Daily IT Security Digest \u2014 2026-08-22\nThree critical vulnerabilities (CVE-2026-77413, CVE-2026-77414, CVE-2026-77415) have been identified in the jsonata-js JavaScript library, with CVSS scores up to 9.3. The flaws involve code injection in the lookup function and object-integrity manipulation,", "creation_timestamp": "2026-08-23T05:02:18.523758Z"}, {"uuid": "f8b5f615-9be3-49ec-8e01-936740477229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-77415", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53hn3h2s", "content": "Daily IT Security Digest \u2014 2026-08-22\nThree critical vulnerabilities (CVE-2026-77413, CVE-2026-77414, CVE-2026-77415) have been identified in the jsonata-js JavaScript library, with CVSS scores up to 9.3. The flaws involve code injection in the lookup function and object-integrity manipulation,", "creation_timestamp": "2026-08-23T05:02:18.564451Z"}, {"uuid": "73bfff1e-84c3-4862-8f57-675f26464948", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77413", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53xsi22d", "content": "Daily IT Security Digest \u2014 2026-08-22\nhttps://radar.offseq.com/threat/cve-2026-77413; https://radar.offseq.com/threat/cve-2026-77414-cwe-94; https://radar.offseq.com/threat/cve-2026-77415-cwe-94\n\n## 2. Microsoft August Patch Day: 22 Vulnerabilities Fixed, ShieldBreak Zero-Day", "creation_timestamp": "2026-08-23T05:02:19.154951Z"}, {"uuid": "1bab4df7-2443-4e89-ba5e-b37d3780d623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77414", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53xsi22d", "content": "Daily IT Security Digest \u2014 2026-08-22\nhttps://radar.offseq.com/threat/cve-2026-77413; https://radar.offseq.com/threat/cve-2026-77414-cwe-94; https://radar.offseq.com/threat/cve-2026-77415-cwe-94\n\n## 2. Microsoft August Patch Day: 22 Vulnerabilities Fixed, ShieldBreak Zero-Day", "creation_timestamp": "2026-08-23T05:02:19.205429Z"}, {"uuid": "cbbb1f20-dca9-436e-8dc2-607563cf1d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-77415", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mtpz53xsi22d", "content": "Daily IT Security Digest \u2014 2026-08-22\nhttps://radar.offseq.com/threat/cve-2026-77413; https://radar.offseq.com/threat/cve-2026-77414-cwe-94; https://radar.offseq.com/threat/cve-2026-77415-cwe-94\n\n## 2. Microsoft August Patch Day: 22 Vulnerabilities Fixed, ShieldBreak Zero-Day", "creation_timestamp": "2026-08-23T05:02:19.246566Z"}]}