Chartkick

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Chartkick records in CISA KEV

No Chartkick vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Chartkick.js · all components

TI-2019-13577 CVE-2019-18841 · GHSA-5pm8-492c-92p5

LOW 35

Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.01391 Published 2019-11-11 Fixed in 3.3.0, 3.2.0