diff

A JavaScript text diff implementation.

npm latest 9.0.0 BSD-3-Clause

Evidence path

Version, exploitation, severity

RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.

1

Latest version

9.0.0

No matching published advisory returned

2

Known exploitation

No KEV match

Checked by exact CVE identifier

3

Highest advisory severity

High

2 active advisories

Check an exact version

The registry confirms the version, then OSV checks advisories for that exact value.

Published records

Advisories

2

jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch

Affected range

SEMVER: introduced 6.0.0; fixed 8.0.3SEMVER: introduced 5.0.0; fixed 5.2.2SEMVER: introduced 4.0.0; fixed 4.0.4SEMVER: introduced 0; fixed 3.5.1

Fixed versions: 8.0.3, 5.2.2, 4.0.4, 3.5.1