Debian Ruby-Jmespath vulnerabilities

1 known vulnerability affecting debian/ruby-jmespath.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-32511CRITICALCVSS 9.8fixed in ruby-jmespath 1.6.1-1 (bookworm)2022

CVE-2022-32511 [CRITICAL] CVE-2022-32511: ruby-jmespath - jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation w... jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable. Scope: local bookworm: resolved (fixed in 1.6.1-1) bullseye: open forky: resolved (fixed in 1.6.1-1) sid: resolved (fixed in 1.6.1-1) trixie: resolved (fixed in 1.6.1-1)