https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 23:04:53 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-122234 <p>jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.format() or formatters.annotated.format() can embed script that executes in the application&#39;s origin when output is rendered.</p> <p>jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.format() or formatters.annotated.format() can embed script that executes in the application&#39;s origin when output is rendered.</p> https://db.gcve.eu/vuln/fkie_cve-2026-122234 https://db.gcve.eu/vuln/ghsa-36c7-f344-vj2m <p>jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.format() or formatters.annotated.format() can embed script that executes in the application&#39;s origin when output is rendered.</p> <p>jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. Attackers who control a delta passed to formatters.html.format() or formatters.annotated.format() can embed script that executes in the application&#39;s origin when output is rendered.</p> https://db.gcve.eu/vuln/ghsa-36c7-f344-vj2m