JSONPath Plus Remote Code Execution (RCE) Vulnerability

[MWein]

Is your feature request related to a problem? Please describe.

The fix for JSONPath was merged sometime last week but has not yet been published. This is a critical security alert.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

[cjcjameson]

+1 -- looking to keep using asl-validator but also address the CVE https://security.aikido.dev/cve/AIKIDO-2024-10347 in jsonpath-plus

[cjcjameson]

#155 is merged

[MWein]

@ChristopheBougere can you get this deployed soon? As a critical, this is holding up our deployment process.

[ChristopheBougere]

@MWein @cjcjameson sorry about that, this is finally deployed in 3.8.4

[cjcjameson]

@ChristopheBougere no worries, thanks so much!