Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| uplot(npm) | 0 | 1.6.31 | N/A |
CVSS Metrics
