New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Plotly version pinned in /panel-main/panel/models/ is vulnerable to prototype polution CVE-2023-46308 #6227

Closed

lpenhallowHome opened this issue Jan 18, 2024 · 0 comments · Fixed by #6230

lpenhallowHome commented Jan 18, 2024

Plotly version pinned in /panel-main/panel/models/ is vulnerable to prototype polution per CVE-2023-46308

https://nvd.nist.gov/vuln/detail/CVE-2023-46308

https://github.com/plotly/plotly.js/releases?q=v2.18.0&expanded=true

philippjfr mentioned this issue

Bump plotly.js version to avoid CVE #6230

Merged

philippjfr closed this as completed in #6230

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment