CVE-2024-21489

The CVE-2024-21489 entry concerns the uPlot library. Affected: uPlot versions before 1.6.31. Root cause: prototype pollution via uplot.assign due to missing check for Object.prototype, enabling modification of prototype attributes. Impact: could allow a remote attacker to execute arbitrary code o...