CVE-2023-46308

Published January 3rd, 2024

View on NVD ↗

CVSS v3

9.8

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.

plotly/plotly.js

Open-source JavaScript charting library behind Plotly and Dash

GitHub

18.2K