← Back

Plotly.js

plotly.js

Vendor: Plotly • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-46308
1Plotly
1Plotly.js
Jun 17, 2026
Jan 3, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.
CVE-2017-1000006
1Plotly
1Plotly.js
May 13, 2026
Jul 17, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.