[jquery.json-viewer] Cross-site Scripting in jquery.json-viewer

The jquery.json-viewer library before version 1.5.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-30241
• https://github.com/abodelot/jquery.json-viewer/pull/26
• https://www.npmjs.com/package/jquery.json-viewer
• https://github.com/abodelot/jquery.json-viewer/releases/tag/v1.5.0
• https://github.com/advisories/GHSA-qp2q-6h9j-jg2r