Description
mxGraph v4.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the setTooltips() function.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | mxgraph | <= 4.2.2 | — | GHSA-j4rv-pr9g-q8jv |
Medium · 6.1
CVE-2022-40440
EUVD-2022-7112GHSA-j4rv-pr9g-q8jv
mxGraph vulnerable to cross-site scripting in setTooltips function
Published Oct 11, 2022 · Updated Jul 9, 2026 · Assigned by mitre