Naver Billboard.Js vulnerabilities
2 vulnerabilities
Known vulnerabilities in Naver Billboard.Js, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2026-1513naver · billboard.js +1 morenaver billboard.jsbillboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding.CVSS6.1MediumEPSS0.21%PrioritiseCVE-2025-49223naver · billboard.js +2 morenaver billboard.jsbillboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.CVSS9.8CriticalEPSS0.90%