Visit NES for JsonPath Home Page

JsonPath 2.7.x Release Notes

1 version

Comprehensive release notes and changelog for JsonPath 2.7.x, including security patches, bug fixes, and feature updates across all supported versions.

Aug 3, 2026
Latest: 2.7.2
1 Patched Vulnerability
VEX Statements

August 2026

2.7.2

Released Aug 3, 2026
Full Version:
2.7.0-json-path-2.7.2

Bug Fixes

This release patches the following:

  • CVE-2023-51074: denial of service via unbounded recursion when parsing a malformed JSONPath bracket expression (stack overflow)

Notes

  • This release originates from the open‑source JsonPath repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds.

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.