JSONPath-Plus vendor intelligence

JSONPath-Plus Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting JSONPath-Plus products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Total KEVs
1
Known exploited vulnerabilities affecting JSONPath-Plus products
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
1
Additional exploited CVEs absent from CISA KEV
Sensor Observed
1
JSONPath-Plus KEV with sensor-observed exploitation activity

The catalog gap matters for JSONPath-Plus exposure

One of the one exploited JSONPath-Plus CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA
100%
Beyond CISA
1
Product families

Attested JSONPath-Plus CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2025-1302

Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker...

jsonpath-plus Confirmed Beyond CISA 01 Jun 2026

Showing 1 of 1 JSONPath-Plus known exploited vulnerabilities.

Recurring weakness patterns

Control account for one mapped occurrence across this JSONPath-Plus KEV portfolio.

Browse all KEVs →

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.

Occasional high-impact alerts. Unsubscribe anytime. See our Privacy Policy.