{"id":"CVE-2026-122234","title":"jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formatters","summary":"jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.fo…","severity":"medium","cvss":4.7,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-79"],"vendor":"benjamine","product":"jsondiffpatch","affected":["jsondiffpatch < 0.7.7"],"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T21:06:41.734Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-122234","references":[{"url":"https://github.com/benjamine/jsondiffpatch/security/advisories/GHSA-jhmf-rq89-q58p","label":"GitHub Security Advisory (GHSA-jhmf-rq89-q58p)"},{"url":"https://github.com/benjamine/jsondiffpatch/commit/c6b2d97b34bc2356c816d8dd0f8b1c8af16bb6af"},{"url":"https://www.vulncheck.com/advisories/jsondiffpatch-before-0.7.7-xss-via-array-move-destination-in-html-formatters","label":"VulnCheck Advisory: jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formatters"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T21:36:00.592Z","epss":0.00179,"epssPercentile":0.07479,"slug":"CVE-2026-122234","body":"## Overview\n\njsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.format() or formatters.annotated.format() can embed script that executes in the application's origin when output is rendered.\n\n## Affected\n\n- `jsondiffpatch < 0.7.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":26,"depthScoreParts":{"impact":25.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}