GHSA-RPC5-PM7Q-HJMP billboard.js is vulnerable to XSS during chart option binding

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

billboard.js is vulnerable to XSS during chart option binding

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

Cross-site Scripting (XSS)

Overview org.webjars.npm:billboard.js is a Re-usable easy interface JavaScript chart library, based on D3 v4+ Affected versions of this package are vulnerable to Cross-site Scripting XSS via improper sanitization in the chart option binding. An attacker can execute arbitrary JavaScript code by...

CVE-2026-1513

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

CVE-2026-1513

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

CVE-2026-1513

The billboard.js JavaScript chart library, developed by NAVER, is vulnerable to Remote JavaScript Execution in versions prior to 3.18.0 . The root cause is improper sanitization (or improper cleanup) during the binding of chart options. An attacker can exploit this flaw to execute malicious JavaS...

PT-2026-5054

Name of the Vulnerable Software and Affected Versions billboard.js versions prior to 3.18.0 Description billboard.js versions before 3.18.0 are susceptible to malicious JavaScript execution. This occurs because of inadequate sanitization when binding chart options. The issue allows an attacker to...

CVE-2026-1513: Improper Neutralization of Input During Web Page Generation

billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding...

billboard.js security vulnerability

billboard.js is a reusable and easy-to-use JavaScript chart library developed by NAVER based on D3.js. Versions of billboard.js prior to 3.18.0 contained a security vulnerability. This vulnerability stemmed from improper cleanup during the binding of chart options, which could allow for the...