PT-2026-5054

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

CVE-2025-49223

CVE-2025-49223 affects billboard.js v before 3.15.1, where the function generate enables prototype pollution that could lead to arbitrary code execution or a Denial of Service. The vulnerability is a result of object prototype pollution in the affected code path; derivatives of the issue are disc...

PT-2025-23732 · Unknown · Billboard.Js

Name of the Vulnerable Software and Affected Versions: billboard.js versions prior to 3.15.1 Description: The issue is related to a prototype pollution via the generate function, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary...