uplot vulnerabilities

1 known vulnerability in uplot from Leeoniya. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  uplot: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-21489Oct 1, 2024Uplot

  Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.