Skip to content
OpenAdvisories

Product · benjamine

jsondiffpatch

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-122234

    jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formatters

    jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.format() or formatters.a…

    benjamine jsondiffpatch