Debian/node-chart.js: critical 9.8
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are
Action: Upgrade node-chart.js to 2.9.4+dfsg+~cs2.10.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.4+dfsg+~cs2.10.1-1 | - |
Fixed versions
| 2.9.4+dfsg+~cs2.10.1-1 |
Sources
- osv: DEBIAN-CVE-2020-7746#Debian:13/node-chart.js
- https://security-tracker.debian.org/tracker/CVE-2020-7746
published · modified · JSON