← Back

Jointjs

jointjs

Vendor: Jointjs • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-28480
1Jointjs
1Jointjs
Jun 17, 2026
Jan 19, 2021
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object's key and set the...Show more
The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.Show less
CVE-2020-28479
1Jointjs
1Jointjs
Jun 17, 2026
Jan 19, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.