https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:42:31.669502+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-10994 bdu:2026-10994 2026-10-08T07:42:31.763436+00:00 bdu:2026-10994 https://cve.radiocsirt.org/vuln/euvd-2026-17404 EUVD-2026-17404 2026-10-08T07:42:31.763473+00:00 EUVD-2026-17404 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32511 fkie_cve-2022-32511 2026-10-08T07:42:31.763488+00:00

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.

 https://cve.radiocsirt.org/vuln/ghsa-5c5f-7vfq-3732 GHSA-5c5f-7vfq-3732 — JMESPath for Ruby uses unsafe JSON.load when safe JSON.parse is preferable 2026-10-08T07:42:31.763517+00:00

Affected: RubyGems: jmespath

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.

 https://cve.radiocsirt.org/vuln/gsd-2022-32511 gsd-2022-32511 2026-10-08T07:42:31.763539+00:00 gsd-2022-32511 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32511 UBUNTU-CVE-2022-32511 2026-10-08T07:42:31.763552+00:00

Affected: Ubuntu:20.04:LTS: ruby-jmespath, Ubuntu:22.04:LTS: ruby-jmespath, Ubuntu:24.04:LTS: ruby-jmespath, Ubuntu:25.10: ruby-jmespath, Ubuntu:26.04:LTS: ruby-jmespath

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.