EUVD-2026-43054

Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js Graphing allows Object Injection. This issue affects Plotly.js Graphing versions: from 0.0.0 to 3.0.2...

CVE-2026-55810

CVE-2026-55810 affects the Drupal Plotly.js Graphing module, where the PHP-serialized data stored in plotly_js_graph fields can be unserialized, enabling PHP object injection. Affected versions are Plotly.js Graphing in Drupal from 0.0.0 to 3.0.2. Root cause is Improperly Controlled Modification ...