25 matches found
CLSA-2026-1780879896 TuxCare security update for jsoneditor (2 CVEs)
TuxCare rebuilt jsoneditor to address 2 CVEs. Fixed in 5.19.0-tuxcare.1...
CVE-2020-23849
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
EUVD-2021-2072
Malware in sbrugna...
EUVD-2021-2246
Malware in sbrugna...
CVE-2021-3822
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
GHSA-Q854-J362-CFQ9 Cross-site Scripting in jsoneditor
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
Cross-site Scripting in jsoneditor
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
@dhakshan82/react-webpack-builder (1.0.0), @getsensibill/web-sdk (0.1.0) +6 more potentially affected by CVE-2021-3822 via jsoneditor (>=9.0.5, <=9.5.5)
jsoneditor NPM version =9.0.5, =2.0.7, =0.0.1, =0.0.85, =0.0.1, =0.0.3 - vue-language-json-view 0.0.1 Source cves: CVE-2021-3822 Source advisory: OSV:GHSA-HHFG-6HFC-RVXM...
Regular Expression Denial Of Service (ReDoS)
jsoneditor is vulnerable to regular expression denial of service. The use of inefficient regex pattern for trimmedValue in getInnerText function of util.js allows a malicious user to crash the application by providing a malicious input...
CVE-2021-3822
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3822
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
Design/Logic Flaw
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3822 Inefficient Regular Expression Complexity in josdejong/jsoneditor
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
CVE-2021-3822
The CVE-2021-3822 entry concerns jsoneditor (josdejong/jsoneditor), where the getInnerText function uses an inefficient regex for trimmedValue, creating potential Regular Expression Denial of Service (ReDoS). Multiple connected sources corroborate a ReDoS risk affecting jsoneditor, with reference...
CVE-2021-3822: Inefficient Regular Expression Complexity
jsoneditor is vulnerable to Inefficient Regular Expression Complexity...
Josdejong Jsoneditor 资源管理错误漏洞
Josdejong Jsoneditor is a web page based software for viewing, editing, and validating Json data by the individual developer Josdejong. A resource management error vulnerability exists in Jsoneditor that stems from an error in a regular expression in the product. An attacker could use this...
Inefficient Regular Expression Complexity in josdejong/jsoneditor
✍️ Description The jsoneditor package is vulnerable to ReDoS regular expression denial of service. An attacker that is able to provide a crafted element as input to the getInnerText function may cause an application to consume an excessive amount of CPU. Below pinned line using vulnerable regex...
CVE-2020-23849
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...