Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Jointjs Clear all filters
TI-2020-17289 CVE-2020-28479 · GHSA-cq8r-fc3q-6hg2

Denial of service (DoS) in jointjs

Priority LOW 37

The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02072 Published 2021-01-19 Fixed in 3.3.0 CWE-400
TI-2020-17290 CVE-2020-28480 · GHSA-qwp9-52h8-xgg8

Prototype pollution in jointjs

Priority MEDIUM 45

The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01376 Published 2021-01-19 Fixed in 3.3.0 CWE-400