Skip to content
OpenAdvisories

Package · npm

billboard.js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2026-1513

    billboard.js is vulnerable to XSS during chart option binding

    billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.

    NAVER billboard.js billboard.js npm
  • Critical 9.8
    CVE-2025-49223 Public exploit

    billboard.js allows prototype pollution via the function generate

    billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    NAVER billboard.js cacti billboard.js Ubuntu npm