defuddle vulnerabilities (npm)

2 vulnerabilities.

• defuddle npm Defuddle: XSS via unescaped attribute interpolation in site extractors CVE-2026-61824 Fix available 8.2 HighAugust 21, 2026
• defuddle npm Defuddle: XSS via unescaped string interpolation in _findContentBySchemaText image tag CVE-2026-30830 Fix available 2.1 LowMarch 6, 2026