Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-55810 2 Drupal, Plotly 2 Plotly.js Graphing, Plotly.js Graphing 2026-07-13 8.1 High
Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2.
CVE-2023-46308 1 Plotly 1 Plotly.js 2025-12-24 9.8 Critical
In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.
CVE-2017-1000006 1 Plotly 1 Plotly.js 2025-04-20 N/A
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.