Jmespath Jmespath.php vulnerabilities

• jmespath, jmespath jmespath.php +1 more jmespath.php has CompilerRuntime code injection via unescaped function names CVE-2026-54133 Fix available 9.8 CriticalJune 12, 2026