CVE-2023-46308

9.8CRITICAL

In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.

Publicado: 1/3/2024Actualizado: 12/24/2025
Ver en NVDVer en MITRE

Descripción

In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty.

Análisis IAImpulsado por IA

Productos Afectados

plotlyplotly.js

Referencias