Read the docs

NAVER

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

NAVER records in CISA KEV

No NAVER vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Billboard.js · all components

TI-2025-31281 CVE-2025-49223 · GHSA-65p9-j6pg-72hj

Prototype pollution in NAVER billboard.js

Priority MEDIUM 51

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary prope…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2025-06-04 Fixed in 3.15.1 CWE-1321
TI-2026-01205 CVE-2026-1513 · GHSA-rpc5-pm7q-hjmp

Cross-site scripting in NAVER billboard.js

Priority LOW 27

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00205 Published 2026-01-28 Fixed in 3.18.0 CWE-79
Open these records in search →