Search vulnerabilities

Results 1

Export CSV
CVE-2024-21489

uplot: Prototype Pollution in uplot

Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Uplot Rhel Aus Rhel E4s and 1 more