Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
mtdowling/jmespath.php
mtdowling/jmespath.php vulnerabilities (Packagist)
1 vulnerability.
mtdowling/jmespath.php
Packagist
jmespath.php has CompilerRuntime code injection via unescaped function names
CVE-2026-54133
Fix available
9.8
Critical
June 12, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open