Billboard Js

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-1513 Jan 28, 02:16 npm MEDIUM PATCH This Month

Cross-site scripting (XSS) in Billboard.js versions before 3.18.0 enables remote attackers to inject and execute arbitrary JavaScript through inadequately sanitized chart configuration options, affecting any application using the vulnerable library. The attack requires user interaction but can compromise confidentiality and integrity of affected web applications. No patch is currently available.

XSS Billboard.Js Suse Naver Billboard Js

NVD VulDB

CVSS 3.1

6.1

EPSS

0.0%

CVE-2025-49223 Jun 04, 03:15 npm CRITICAL PATCH Act Now

Prototype pollution in billboard.js before 3.15.1 via generate function.

RCE Denial Of Service Billboard.Js Naver Billboard Js

NVD

CVSS 3.1

9.8

EPSS

0.4%

CVE-2026-1513 npm

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

XSS Billboard.Js Suse +2

NVD VulDB

CVE-2025-49223 npm

EPSS 0% CVSS 9.8

CRITICAL PATCH Act Now

Prototype pollution in billboard.js before 3.15.1 via generate function.

RCE Denial Of Service Billboard.Js +2

NVD