Description
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | plotly.js | < 1.16.0 | 1.16.0 | GHSA-2fqv-h3r5-m4vf |
Medium · 6.1
CVE-2017-1000006
EUVD-2017-0150GHSA-2fqv-h3r5-m4vf
Cross Site Scripting (XSS) in plotly.js
Published Jul 13, 2017 · Updated Aug 5, 2024 · Assigned by mitre