Skip to content
OpenAdvisories

Package · npm

diff

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 2.7
    CVE-2026-24001

    jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch

    jsdiff is a JavaScript text differencing implementation. Prior to versions 8.0.3, 5.2.2, 4.0.4, and 3.5.1, attempting to parse a patch whose filename headers contain the line break characters `\r`, `\u2028`, or `\u2029` can cause the `parsePatch` method to en…

    kpdecker jsdiff diff node-diff Debian Ubuntu npm
  • High —
    GHSA-h6ch-v84p-w6p9

    Regular Expression Denial of Service (ReDoS)

    A vulnerability was found in diff before v3.5.0, the affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.

    diff npm