Skip to content
OpenAdvisories

Package · npm

uplot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2024-21489

    uPlot Prototype Pollution vulnerability

    Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.

    uplot npm