CLSA-2026-1780879896 TuxCare security update for jsoneditor (2 CVEs)

TuxCare rebuilt jsoneditor to address 2 CVEs. Fixed in 5.19.0-tuxcare.1...

PT-2026-74968

TuxCare rebuilt jsoneditor to address 2 CVEs. Fixed in 5.19.0-tuxcare.1...

CVE-2020-23849

Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...

EUVD-2021-2072

Malware in sbrugna...

EUVD-2021-2246

Malware in sbrugna...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

Cross-site Scripting in jsoneditor

Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...

GHSA-Q854-J362-CFQ9 Cross-site Scripting in jsoneditor

Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...

@dhakshan82/react-webpack-builder (1.0.0), @getsensibill/web-sdk (0.1.0) +6 more potentially affected by CVE-2021-3822 via jsoneditor (>=9.0.5, <=9.5.5)

jsoneditor NPM version =9.0.5, =2.0.7, =0.0.1, =0.0.85, =0.0.1, =0.0.3 - vue-language-json-view 0.0.1 Source cves: CVE-2021-3822 Source advisory: OSV:GHSA-HHFG-6HFC-RVXM...

@dhakshan82/react-webpack-builder (1.0.0), @getsensibill/web-sdk (0.1.0) +6 more potentially affected by CVE-2021-3822 via jsoneditor (>=9.0.5, <=9.5.5)

jsoneditor NPM version =9.0.5, =2.0.7, =0.0.1, =0.0.85, =0.0.1, =0.0.3 - vue-language-json-view 0.0.1 Source cves: CVE-2021-3822 Source advisory: GHSA-HHFG-6HFC-RVXM...

Regular Expression Denial Of Service (ReDoS)

jsoneditor is vulnerable to regular expression denial of service. The use of inefficient regex pattern for trimmedValue in getInnerText function of util.js allows a malicious user to crash the application by providing a malicious input...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

Design/Logic Flaw

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822 Inefficient Regular Expression Complexity in josdejong/jsoneditor

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

CVE-2021-3822

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

0.8.18-p11 (0.8.18-p12), @abtasty-innovation/module-wrapper (>=0.1.0, <=0.2.31) +227 more potentially affected by CVE-2021-3822 via jsoneditor (>=3.2.0, <=9.5.5)

jsoneditor NPM version =3.2.0, =0.1.0, =0.0.2, =0.1.0-snapshot.1, =2.6.4, =0.0.4, =0.0.27, =0.0.1, =0.0.1, =0.5.0-before.9, =0.1.1, =0.0.1, =0.0.46, =0.0.57 and more Source cves: CVE-2021-3822 Source advisory: MEND:CVE-2021-3822...

CVE-2021-3822

The CVE-2021-3822 entry concerns jsoneditor (josdejong/jsoneditor), where the getInnerText function uses an inefficient regex for trimmedValue, creating potential Regular Expression Denial of Service (ReDoS). Multiple connected sources corroborate a ReDoS risk affecting jsoneditor, with reference...

CVE-2021-3822: Inefficient Regular Expression Complexity

jsoneditor is vulnerable to Inefficient Regular Expression Complexity...

PT-2021-22007

Name of the Vulnerable Software and Affected Versions: jsoneditor affected versions not specified Description: The issue concerns Inefficient Regular Expression Complexity, specifically a ReDoS regular expression denial of service vulnerability. This allows an attacker to cause an application to...