CVE-2020-7746
1 advisory.
npm/chart.js CVE-2020-7746: high 7.5, EPSS 4.74%
Prototype pollution in chart.js
Action: Upgrade chart.js to 2.9.4 or later.
npm i chart.js@2.9.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.4 | - |
Fixed versions
| 2.9.4 |
Sources
- osv: GHSA-h68q-55jf-x68w
- https://nvd.nist.gov/vuln/detail/CVE-2020-7746
- https://github.com/chartjs/Chart.js/pull/7920
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1019375
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBCHARTJS-1019376
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019374
- https://snyk.io/vuln/SNYK-JS-CHARTJS-1018716
CVE-2020-7746 · published · modified · JSON