billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary prope…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00902·Published 2025-06-04·Fixed in 3.15.1CWE-1321