CVE-2026-30830
1 advisory.
npm/defuddle CVE-2026-30830: medium 6.1, EPSS 0.28%
defuddle vulnerable to XSS via unescaped string interpolation in _findContentBySchemaText image tag
Action: Upgrade defuddle to 0.9.0 or later.
npm i defuddle@0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
- osv: GHSA-5mq8-78gm-pjmq
- https://github.com/kepano/defuddle/security/advisories/GHSA-5mq8-78gm-pjmq
- https://nvd.nist.gov/vuln/detail/CVE-2026-30830
- https://github.com/kepano/defuddle/commit/f154cb740ee603431b69638273af737a27156df9
- https://github.com/kepano/defuddle
CVE-2026-30830 · published · modified · JSON