jsondiffpatch
NPM
Releases69
Frequency2 months 1 week
Last Release
JSON diff & patch (object and array diff, text diff, multiple output formats)
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 0.7.2 | 4.7 MEDIUM | — | ||
Versions of the package jsondiffpatch before 0.7.2 are vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin. An attacker can inject malicious scripts into HTML payloads that may lead to code execution if untrusted payloads were used as source for the diff, and the result renderer using the built-in html formatter on a private website. | ||||