Vendor
pivotick
8 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 8.2
Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data
Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affected graph algorithms recursively traversed graph edges, while the JSON viewer recursively processed each level of a node’s data structure. …
-
High 8.2
DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons
Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before inserting it into the document. When rendering a graph node, the vulnerable code assigns the SVG icon markup directly to the innerHTML proper…