jsondiffpatch vulnerabilities

CVEs whose affected-version data names the jsondiffpatch package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-122234Medium· 4.7

3d ago

jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formatters

jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.fo…

▾ Sunlitbenjamine · jsondiffpatchEPSS 0.18%via CVEORG