uplot: Prototype Pollution in uplot

A flaw was found in uPlot. This vulnerability allows prototype pollution via the uplot.assign function due to missing checks for attributes that resolve to the object prototype...

Prototype Pollution

Overview uplot is an A small, fast chart for time series, lines, areas, ohlc & bars Affected versions of this package are vulnerable to Prototype Pollution via the uplot.assign function due to missing check if the attribute resolves to the object prototype. PoC js var uplot = require"uplot" BADJS...