CVE-2026-77413

Name of the Vulnerable Software and Affected Versions JSONata versions prior to 1.8.8 JSONata versions prior to 2.2.0

Description The lookup function in src/functions.js lacks an Object.prototype.hasOwnProperty check, allowing crafted expressions to access inherited prototype members. An attacker providing a malicious expression can utilize inherited prototype setters, getters, constructor access, valueOf, and process.getBuiltinModule to access the child process module and execute arbitrary code with the privileges of the host process.

Recommendations Update to version 1.8.8 or later. Update to version 2.2.0 or later.