VYPR

Uplot

by Leeoniya

Source repositories

CVEs (1)

  • CVE-2024-21489HigOct 1, 2024
    risk 0.46cvss 8.2epss 0.01

    Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.