CVE-2020-7746

CVE-2020-7746 affects the chart.js library prior to 2.9.4. The vulnerability arises when processing the options parameter: options are deeply merged with provided values, but keys of the object being set are not checked, enabling a prototype pollution flaw. This can occur during object merging of...