CVE-2026-1513
CVE-2026-1513
This page contains facts from public vulnerability sources. Check the original advisory before updating.
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
CVSS 6.1 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
billboard.js
- Versions
- 3.18.0: Not affected
No fix published
billboard.js npm
- Affected ranges
- SEMVER: < 3.18.0
Update to 3.18.0