ChartjsCVEs & Vulnerabilities

1 CVEs affecting Chartjs products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

chart.js 1

CVE-2020-7746CRITICAL

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.

29 Oct 2020

9.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database