CVE-2026-1513
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
- Обновитесь до 3.18.0
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в billboard.js опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.