jsdiff vulnerabilities

CVEs whose affected-version data names the jsdiff package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-24001High· 7.5

8mo ago

jsdiff is a JavaScript text differencing implementation

jsdiff is a JavaScript text differencing implementation. Prior to versions 8.0.3, 5.2.2, 4.0.4, and 3.5.1, attempting to parse a patch whose filename headers contain the line break characters `\r`, `\u2028`, or `\u2029` can cause the `pa…

▾ Twilightkpdecker · jsdiffEPSS 0.63%via NVD