CVE-2023-46308
In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.
- Update to 2.25.2
Published Updated
PatchFirst · Latest vulnerabilities
plotly.js vulnerabilities
Vulnerabilities published for plotly.js in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2017-1000006
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
- Update to 1.16.0
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.