CVE-2026-77414

Name of the Vulnerable Software and Affected Versions JSONata versions prior to 1.8.8 JSONata versions prior to 2.2.1

Description The environment.lookup() function in src/jsonata.js uses a bypassable hasOwnProperty check. An attacker can use crafted expressions involving $hasOwnProperty, $spread, $string, prototype access, and $constructor to reach the object prototype and invoke process.getBuiltinModule with child process, leading to arbitrary code execution with the privileges of the host process.

Recommendations Update to version 1.8.8 or later. Update to version 2.2.1 or later.