PatchTheCVEjointjs vulnerabilities
Recent CVEs affecting jointjs products. 2 tracked.
jointjs has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2021-01-19. Highest priority: CVE-2020-28480 (score 49/100).
- CVE-2020-28480 HIGH 7.3 UPGRADE The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.j
- CVE-2020-28479 MEDIUM 5.9 UPGRADE The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.
FAQ
How do I fix jointjs vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jointjs being exploited right now?
None of the tracked jointjs CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jointjs CVE should I patch first?
CVE-2020-28480 currently ranks highest (49/100): The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.j.