Skip to content
OpenAdvisories

Package · Debian

node-diff

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Low 2.7
    CVE-2026-24001

    jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch

    jsdiff is a JavaScript text differencing implementation. Prior to versions 8.0.3, 5.2.2, 4.0.4, and 3.5.1, attempting to parse a patch whose filename headers contain the line break characters `\r`, `\u2028`, or `\u2029` can cause the `parsePatch` method to en…

    kpdecker jsdiff diff node-diff Debian Ubuntu npm