Cloudanix VulnDB

GHSA-73rr-hh4g-fpgx

None

CVSS

—

EPSS

—

Published

Jan 14, 2026

CISA due date

—

The record

jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch

Affected packages

Ecosystem Package Introduced Fixed
npm diff 0 3.5.1
npm diff 4.0.0 4.0.4
npm diff 5.0.0 5.2.2
npm diff 6.0.0 8.0.3
Chainguard actions-runner 0 2.331.0-r1
Chainguard argo-workflows-ui-3.6 0 3.6.17-r0
Chainguard argo-workflows-ui-3.7 0 3.7.8-r0
Chainguard code-server 0 0
Chainguard gitlab-rails-ce-assets-18.10 0 0
Chainguard gitlab-rails-ce-assets-18.6 0 0
Chainguard gitlab-rails-ce-assets-18.7 0 0
Chainguard gitlab-rails-ce-assets-18.8 0 0
Chainguard gitlab-rails-ce-assets-18.9 0 0
Chainguard gitlab-rails-ce-assets-fips-18.6 0 0
Chainguard gitlab-rails-ce-assets-fips-18.7 0 0
Chainguard gitlab-rails-ce-assets-fips-18.8 0 0
Chainguard gitlab-rails-ce-assets-fips-18.9 0 0
Chainguard graalvm-24-ce-nodejs 0 24.0.2-r8
Chainguard graalvm-25-ce-nodejs 0 25.0.1-r2
Chainguard graalvm-25-ce-nodejs 0 25.0.1-r3
Chainguard grafana-12.1 0 12.1.5-r2
Chainguard grafana-12.1 0 12.1.6-r0
Chainguard grafana-fips-12.1 0 12.1.6-r0
Chainguard langfuse-2-worker 0 2.95.12-r6
Chainguard langfuse-3-worker 0 3.146.0-r2
Chainguard langfuse-fips-2-worker 0 2.95.12-r6
Chainguard langfuse-fips-3-worker 0 3.147.0-r1
Chainguard librechat 0 0.8.1-r5
Chainguard npm 0 11.8.0-r0
Chainguard prism 0 5.14.3-r2
Chainguard redisinsight 0 3.0.2-r1
Chainguard renovate 0 43.2.4-r0
Chainguard tileserver-gl 0 5.5.0-r2
Chainguard tileserver-gl-fips 0 5.5.0-r3
Chainguard vitess-22 0 22.0.3-r0
Chainguard vitess-23 0 23.0.1-r0
Wolfi argo-workflows-ui-3.7 0 3.7.8-r0
Wolfi code-server 0 0
Wolfi grafana-12.1 0 12.1.5-r2
Wolfi grafana-12.1 0 12.1.6-r0
Wolfi langfuse-3-worker 0 3.146.0-r2
Wolfi npm 0 11.8.0-r0
Wolfi prism 0 5.14.3-r2
Wolfi renovate 0 43.2.4-r0
Wolfi tileserver-gl 0 5.5.0-r2
Wolfi vitess-22 0 22.0.3-r0
Wolfi vitess-23 0 23.0.1-r0

Related vulnerabilities