Threats tagged 'ghsa-86vw-mfpg-wwv9'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.7%	CVE-2026-52746jsonata · Malicious inputs to "$toMillis" function can cause resource exhaustion High7.5EPSS 0.7%2026-07-02GCVE DatabaseCVE-2026-52746 A vulnerability in the jsonata library's $toMillis function allows crafted inputs to cause excessive regex backtracking, leading to denial of service. This affects versions prior to 2.2.0 and 1.8.9. The issue is fixed in jsonata 2.2.0 and 1.8.9. The vulnerability has a high severity score of 7.5 CVSS 3.1 and does not impact confidentiality or integrity but causes availability disruption. EPSS 0.7%Report on CVE-2026-52746 Vulnerability CWE-1333 #ghsa-86vw-mfpg-wwv9 #npm	GCVE Database	2026-07-02

Page 1 of 1