jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.

Question

Closed this issue a year ago · 1 comments

did a security scan for the docker img created and this issue came up. Ill send a follow up PR to patch

Answer 1 · 2024-06-03T01:23:32.000Z

updated aws-sdk in my own app