GHSA-5PM8-492C-92P5 Prototype Pollution in chartkick

Affected versions of @polymer/polymer are vulnerable to prototype pollution. The package fails to prevent modification of object prototypes through chart options containing a payload such as "proto": "polluted": true. It is possible to achieve the same results if a chart loads data from a malicio...

Prototype Pollution in chartkick

Affected versions of @polymer/polymer are vulnerable to prototype pollution. The package fails to prevent modification of object prototypes through chart options containing a payload such as "proto": "polluted": true. It is possible to achieve the same results if a chart loads data from a malicio...

PT-2019-15695

Name of the Vulnerable Software and Affected Versions Chartkick.js versions 3.1.0 through 3.1.3 @polymer/polymer versions prior to 3.2.0 Description The issue allows prototype pollution, which can be achieved through chart options containing a malicious payload, such as " proto ": "polluted": tru...