PT-2026-5054

Name of the Vulnerable Software and Affected Versions billboard.js versions prior to 3.18.0 Description billboard.js versions before 3.18.0 are susceptible to malicious JavaScript execution. This occurs because of inadequate sanitization when binding chart options. The issue allows an attacker to...

CVE-2025-49223

The billboard.js charting library (versions prior to 3.15.1 ) contains a prototype pollution vulnerability within the generate function. This flaw allows an attacker to inject arbitrary properties into the Object.prototype, which can lead to arbitrary code execution or a Denial of Service (DoS) ....

PT-2025-23732 · Unknown · Billboard.Js

Name of the Vulnerable Software and Affected Versions: billboard.js versions prior to 3.15.1 Description: The issue is related to a prototype pollution via the generate function, which could allow attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary...