VYPR

Uplot

by Leeoniya

npm: uplot

Source repositories

CVEs (1)

  • CVE-2024-21489HigOct 1, 2024
    risk 0.46cvss 8.2epss 0.01

    Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.