Количество 3
Количество 3
CVE-2024-21489
Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.
CVE-2024-21489
Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.
GHSA-34q8-jcq6-mc37
uPlot Prototype Pollution vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2024-21489 Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype. | CVSS3: 8.2 | 0% Низкий | больше 1 года назад | |
CVE-2024-21489 Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype. | CVSS3: 8.2 | 0% Низкий | больше 1 года назад | |
GHSA-34q8-jcq6-mc37 uPlot Prototype Pollution vulnerability | CVSS3: 8.2 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу