org.webjars.bowergithub.plotly:plotly.js@1.57.1

latest version

1.57.1

first published

5 years ago

latest version published

5 years ago

licenses detected

MIT
[1.57.1,)

package registry

View on Maven Central Repository

Go back to all versions of this package

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.bowergithub.plotly:plotly.js package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Prototype Pollution org.webjars.bowergithub.plotly:plotly.js is a package that provides an easy and simple way to export package.json data. Affected versions of this package are vulnerable to Prototype Pollution via the `expandObjectPaths` or `nestedProperty` functions. An attacker can manipulate the prototype of base objects by injecting properties into existing JavaScript objects. How to fix Prototype Pollution? There is no fixed version for `org.webjars.bowergithub.plotly:plotly.js`.	[0,)
M Cross-site Scripting (XSS) org.webjars.bowergithub.plotly:plotly.js is a package that provides an easy and simple way to export package.json data. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). How to fix Cross-site Scripting (XSS)? There is no fixed version for `org.webjars.bowergithub.plotly:plotly.js`.	[0,)
L CSS Injection `plotly.js` is a high-level, declarative charting library. Affected versions of the package allowed the style attribute to be manipulated in the tag inside the embedded `svg` making them vulnerable to a css injection which allowed for tracking images to be embedded and leak information to an external domain. How to fix CSS Injection? Upgrade to `plotly.js` version 1.16.0 or newer.	[0,)

Go back to all versions of this package