CVE-2023-51074: JSON-Path Jayway Jsonpath

Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days.

json-path v2.8.0 was discovered to contain a stack overflow via the Criteria.parse() method.

Affected products

• JSON-Path Jayway Jsonpath: from 2.2.0, before 2.9.0 (fixed in 2.9.0)

Published 2023-12-27. Last modified 2026-06-17.