CVE 2022-32511

jmespath.rb (aka JMESPath for Ruby) before 1.6.1 uses JSON.load in a situation where JSON.parse is preferable.

Related bugs and status

CVE-2022-32511 (Candidate) is related to these bugs:

Bug #1990572: [MIR] Promote ruby-json to main as a pcs dependency

Summary				In	Importance	Status
	1990572	[MIR] Promote ruby-json to main as a pcs dependency		ruby-json (Ubuntu)	Undecided	Invalid

See the

CVE page on Mitre.org for more details.