EXPOSURES › CVE-2022-32511
CVE-2022-32511
CRITICAL
DETAIL
SourceNVD · cve
Published2022-06-06
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2022-32511 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
DESCRIPTION
jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.