Org.webjars.npm:jsondiffpatch vulnerabilities
We track 1 vulnerability in Org.webjars.npm:jsondiffpatch products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Org.webjars.npm:jsondiffpatch vulnerabilities
- 8.2 High severity
jsondiffpatch: Improperly Controlled Modification of Object Prototype Attributes
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs. An attacker can perform prototype pollution by supplying crafted delta or JSON Patch doc