The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00715·Published 2022-05-04·Fixed in 1.5.0CWE-79