The package jointjs before 3.3.0 are vulnerable to Denial of Service (DoS) via the unsetByPath function.
7.5CVSS
7.4AI Score
0.002EPSS
The package jointjs before 3.3.0 are vulnerable to Prototype Pollution via util.setByPath (https://resources.jointjs.com/docs/jointjs/v3.2/joint.htmlutil.setByPath). The path used the access the object's key and set the value is not properly sanitized, leading to a Prototype Pollution.
9.8CVSS
9.2AI Score
0.003EPSS
This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used in the path parameter are arrays in the setByPath function.
9.8CVSS
9.2AI Score
0.024EPSS