CVE-2026-30830 | kepano defuddle up to 0.8.x src/defuddle.ts _findContentBySchemaText cross site scripting (GHSA-5mq8-78gm-pjmq)

March 7, 2026 Yanac

A vulnerability categorized as problematic has been discovered in kepano defuddle up to 0.8.x. Affected by this vulnerability is the function _findContentBySchemaText of the file src/defuddle.ts. The manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-30830. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More