Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/09/11 6:30 a.m.12 views

jsondiffpatch is vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin

Vulnerability in jsondiffpatch Versions of jsondiffpatch prior to 0.7.2 are vulnerable to Cross-site Scripting XSS in the HtmlFormatter HtmlFormatter::nodeBegin. When diffs are rendered to HTML using the built-in formatter, untrusted payloads can inject scripts and execute in the context of a...

4.7CVSS6AI score0.0028EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder