exploitDog

GHSA-gr6q-5p85-fq4q

Опубликовано: 11 июл. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

Ссылки

EPSS

Процентиль: 16%

0.00248

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-915

Связанные уязвимости

CVE-2026-55810

CVSS3: 8.1

redhat

25 дней назад

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

CVE-2026-55810

CVSS3: 8.1

nvd

25 дней назад

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.

EPSS

Процентиль: 16%

0.00248

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-915