CVE-2022-25921: Morgan-JSON Project Morgan-JSON

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

All versions of package morgan-json are vulnerable to Arbitrary Code Execution due to missing sanitization of input passed to the Function constructor.

Affected products

Published 2022-08-29. Last modified 2026-06-17.