VULNERABILITY INTELLIGENCE
CVE-2024-21489
CVSS score8.2 HIGH
EPSS probability0.71%
CISA KEVNot currently listed
Published2024-10-01
Last modified2026-08-10
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Description
Versions of the package uplot before 1.6.31 are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype.
Weakness classification
- report@snyk.io: CWE-1321