Skip to content
OpenAdvisories

Package · npm

billboard.js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-49223 Public exploit

    billboard.js allows prototype pollution via the function generate

    billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

    NAVER billboard.js cacti billboard.js Ubuntu npm