CVE-2016-1000241

Affected versions of "pivottable" are vulnerable to cross-site scripting, due to a new mechanism used to render JSON elements...