CVE-2026-1513
1 advisory.
npm/billboard.js CVE-2026-1513: high 7.1, EPSS 0.20%
billboard.js is vulnerable to XSS during chart option binding
Action: Upgrade billboard.js to 3.18.0 or later.
npm i billboard.js@3.18.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.18.0 | - |
Fixed versions
| 3.18.0 |
Sources
- osv: GHSA-rpc5-pm7q-hjmp
- https://nvd.nist.gov/vuln/detail/CVE-2026-1513
- https://github.com/naver/billboard.js/issues/4078
- https://github.com/naver/billboard.js/commit/49e079cdd466fc8ba7ab208988181e5b7a5f336b
- https://cve.naver.com/detail/cve-2026-1513.html
- https://github.com/naver/billboard.js
CVE-2026-1513 · published · modified · JSON