← Back

Billboard.js

billboard.js

Vendor: Naver • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-1513
1Naver
1Billboard.js
Feb 2, 2026
Jan 28, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.
CVE-2025-49223
1Naver
1Billboard.js
Jun 6, 2025
Jun 4, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary prope...Show more
billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.Show less