TI-2026-85207 CVE-2026-122234 · GHSA-36c7-f344-vj2m
Cross-site scripting in jsondiffpatch HTML formatters via array-move index
Priority LOW 11
jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta.