Skip to content
OpenAdvisories

Package · npm

plotly.js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2023-46308

    plotly.js prototype pollution vulnerability

    In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.

    plotly.js plotly/plotly.js npm Packagist
  • Medium 6.1
    CVE-2017-1000006

    Cross Site Scripting (XSS) in plotly.js

    Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.

    plotly.js npm