Known Vulnerabilities for Json-path by Symfony
Listed below are 10 of the newest known vulnerabilities associated with "Json-path" by "Symfony".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111635 json | Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-110816 json | ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when a... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-110385 json | A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker wi... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-110290 json | The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attr... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-109383 json | undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-109361 json | MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessi... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109309 json | SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, whi... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108751 json | MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows mali... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-108372 json | Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From versi... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-108258 json | Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore... | Not Provided | 2026-10-09 | 2026-10-13 |