Read the docs

Jointjs

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Jointjs records in CISA KEV

No Jointjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jointjs 2 records MEDIUM

Records

2 records

TI-2020-17290 CVE-2020-28480 · GHSA-qwp9-52h8-xgg8

Prototype pollution in jointjs

Priority MEDIUM 45

The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01376 Published 2021-01-19 Fixed in 3.3.0 CWE-400
TI-2020-17289 CVE-2020-28479 · GHSA-cq8r-fc3q-6hg2

Denial of service (DoS) in jointjs

Priority LOW 37

The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02072 Published 2021-01-19 Fixed in 3.3.0 CWE-400
Open these records in search →