CVE-2026-54133 | jmespath jmespath.php up to 2.9.0 Expression input validation

June 12, 2026 Yanac

A vulnerability was found in jmespath jmespath.php up to 2.9.0 and classified as critical. Impacted is an unknown function of the component Expression Handler. The manipulation results in improper input validation.

This vulnerability is cataloged as CVE-2026-54133. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More