Export limit exceeded: 425852 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2020-28480

Prototype Pollution

The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.

CVSS 3.1 · 7.3 High EPSS 1.4% KEV · Not listed
Vendors
Jointjs
Products
Jointjs
CVE-2020-28479

Denial of Service (DoS)

The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.

CVSS 3.1 · 5.9 Medium EPSS 2.1% KEV · Not listed
Vendors
Jointjs
Products
Jointjs