Skip to content
OpenAdvisories

Package · npm

telejson

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-47099

    TeleJSON < 6.0.0 DOM-based XSS via parse() Function

    TeleJSON prior to 6.0.0 contains a DOM-based cross-site scripting vulnerability in the parse() function that allows attackers to execute arbitrary JavaScript by delivering a crafted JSON payload containing a malicious _constructor-name_ property value. The cu…

    storybookjs telejson telejson npm