Linux Distros Unpatched Vulnerability : CVE-2025-49223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or...

CVE-2025-49223

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

@mwater/visualization (6.0.0), azharimm-ui (>=1.0.0, <=1.0.2) +2 more potentially affected by CVE-2025-49223 via billboard.js (>=3.1.5, <=3.14.0)

billboard.js NPM version =3.1.5, =1.0.0, =2.0.180, =2.4.42 - vuero 2.2.0 Source cves: CVE-2025-49223 Source advisory: GHSA-65P9-J6PG-72HJ...

CVE-2025-49223

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2025-49223

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2025-49223

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

CVE-2025-49223

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

@activfinancial/activ-workstation (>=0.3.0, <=0.4.35), @activfinancial/time-series-chart (>=0.3.40, <=0.3.51) +39 more potentially affected by CVE-2025-49223 via billboard.js (>=1.0.1, <=3.14.0)

billboard.js NPM version =1.0.1, =0.3.0, =0.3.40, =3.0.0-alpha.1, =0.0.55, =1.0.0, =1.0.0, =4.0.0, =1.0.0, =1.0.0, =0.0.1-alpha.1, =1.5.0, =2.0.0 and more Source cves: CVE-2025-49223 Source advisory: MEND:CVE-2025-49223...

CVE-2025-49223

The billboard.js charting library (versions prior to 3.15.1 ) contains a prototype pollution vulnerability within the generate function. This flaw allows an attacker to inject arbitrary properties into the Object.prototype, which can lead to arbitrary code execution or a Denial of Service (DoS) ....