jsondiffpatch vulnerabilities (npm)

2 vulnerabilities.

• jsondiffpatch npm jsondiffpatch patch APIs are vulnerable to prototype pollution CVE-2026-8657 Fix available 8.8 HighMay 16, 2026
• jsondiffpatch npm jsondiffpatch is vulnerable to Cross-site Scripting (XSS) via HtmlFormatter::nodeBegin CVE-2025-9910 Fix available 2.3 LowSeptember 11, 2025