Skip to content
OpenAdvisories

Package · npm

plotly.js

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-46308

    plotly.js prototype pollution vulnerability

    In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.

    plotly.js plotly/plotly.js npm Packagist