https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 21:17:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-165270 EUVD-2026-165270 https://cve.radiocsirt.org/vuln/euvd-2026-165270 https://cve.radiocsirt.org/vuln/fkie_cve-2020-28480 <p>The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object&#39;s key and set the value is not properly sanitized, leading to a Prototype Pollution.</p> <p>The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object&#39;s key and set the value is not properly sanitized, leading to a Prototype Pollution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-28480 https://cve.radiocsirt.org/vuln/ghsa-qwp9-52h8-xgg8 <p><strong>Affected:</strong> npm: jointjs</p> <p>The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object&#39;s key and set the value is not properly sanitized, leading to a Prototype Pollution.</p> <p><strong>Affected:</strong> npm: jointjs</p> <p>The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object&#39;s key and set the value is not properly sanitized, leading to a Prototype Pollution.</p> https://cve.radiocsirt.org/vuln/ghsa-qwp9-52h8-xgg8 https://cve.radiocsirt.org/vuln/gsd-2020-28480 gsd-2020-28480 https://cve.radiocsirt.org/vuln/gsd-2020-28480