Severity: Critical
CVSS Score: 9.8
The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.