Path to vulnerable library: /python/XSS-url/static/js/chart.min.js,/python/SQLI-like/static/js/chart.min.js,/python/CSP/static/js/chart.min.js,/python/NoSQL/static/js/chart.min.js,/python/CSRF-SameSite/static/js/chart.min.js,/python/CMD/static/js/chart.min.js,/java/jwt-null/src/main/resources/static/js/chart.min.js,/python/CMD2/static/js/chart.min.js,/java/url-redirection-harder2/src/main/resources/static/js/chart.min.js,/python/XSS-DOM/static/js/chart.min.js,/python/graphql-injections/static/js/chart.min.js,/python/Content-type/static/js/chart.min.js,/java/auth-bypass2/src/main/resources/static/js/chart.min.js,/python/JWT-secret/static/js/chart.min.js,/python/http-response-splitting/static/js/chart.min.js,/python/graphql-IDOR/static/js/chart.min.js,/python/Url-redirection/static/js/chart.min.js,/java/ldap-injection/src/main/resources/static/js/chart.min.js,/python/RTLO/static/js/chart.min.js,/python/DES-Pickle/static/js/chart.min.js,/python/DoS-regex/static/js/chart.min.js,/python/DES-Pickle-2/static/js/chart.min.js,/java/cssi/src/main/resources/static/js/chart.min.js,/python/JWT-null/static/js/chart.min.js,/python/user-registration-process/static/js/chart.min.js,/python/Url-redirection-harder/static/js/chart.min.js,/python/client-side-restriction-bypass-2/static/js/chart.min.js,/java/xss/src/main/resources/static/js/chart.min.js,/java/racecondition/src/main/resources/static/js/chart.min.js,/java/content-type/src/main/resources/static/js/chart.min.js,/python/DNS-rebinding/static/js/chart.min.js,/java/csrf-weak/src/main/resources/static/js/chart.min.js,/java/info-leakage-comments/src/main/resources/static/js/chart.min.js,/python/DES-Yaml/static/js/chart.min.js,/python/RFI/static/js/chart.min.js,/python/Web-cache-poisoning/static/js/chart.min.js,/java/lfi3/src/main/resources/static/js/chart.min.js,/python/SQLI-blind/static/js/chart.min.js,/java/graphql-injections/src/main/resources/static/js/chart.min.js,/python/IDOR/static/js/chart.min.js,/python/info-leakeage-metadata/static/js/chart.min.js,/python/CSRF-weak/static/js/chart.min.js,/lab-template/static/js/chart.min.js,/python/ratelimiting/static/js/chart.min.js,/java/lfi2/src/main/resources/static/js/chart.min.js,/python/LFI-3/static/js/chart.min.js,/python/graphql-info-introspection/static/js/chart.min.js,/python/SQLI-login-bypass/static/js/chart.min.js,/python/Formula-injection/static/js/chart.min.js,/java/credentials-guessing2/src/main/resources/static/js/chart.min.js,/c/32_bufferOverflow/static/js/chart.min.js,/python/session-hijacking-xss/static/js/chart.min.js,/python/Auth-bypass/static/js/chart.min.js,/java/sqli-like/src/main/resources/static/js/chart.min.js,/java/rtlo/src/main/resources/static/js/chart.min.js,/java/ssrf/src/main/resources/static/js/chart.min.js,/java/xss-dom2/src/main/resources/static/js/chart.min.js,/python/SessionPuzzle/static/js/chart.min.js,/python/RaceCondition-file-write/static/js/chart.min.js,/java/formula-injection/src/main/resources/static/js/chart.min.js,/java/cmd2/src/main/resources/static/js/chart.min.js,/python/SSRF/static/js/chart.min.js,/python/Host-Header-Authentication-Bypass/static/js/chart.min.js,/python/credentials-guessing-1/static/js/chart.min.js,/python/Session-Management-1/static/js/chart.min.js,/python/CMD4/static/js/chart.min.js,/python/XSS/static/js/chart.min.js,/java/ratelimiting/src/main/resources/static/js/chart.min.js,/java/ssti/src/main/resources/static/js/chart.min.js,/java/ldap-injection-harder/src/main/resources/static/js/chart.min.js,/java/graphql-info-introspection/src/main/resources/static/js/chart.min.js,/python/TLS-downgrade/static/js/chart.min.js,/java/cmd-blind/src/main/resources/static/js/chart.min.js,/java/sqli-blind/src/main/resources/static/js/chart.min.js,/python/CMD-Blind/static/js/chart.min.js,/python/Auth-bypass-3/static/js/chart.min.js,/python/CSSI/static/js/chart.min.js,/java/rfi/src/main/resources/static/js/chart.min.js,/java/cmd/src/main/resources/static/js/chart.min.js,/python/SQLI/static/js/chart.min.js,/nodeJs/Graphql-DOS/static/js/chart.min.js,/java/session-hijacking-xss/src/main/resources/static/js/chart.min.js,/java/xxe/src/main/resources/static/js/chart.min.js,/java/http-response-splitting/src/main/resources/static/js/chart.min.js,/java/dos-regex/src/main/resources/static/js/chart.min.js,/java/sessionpuzzle/src/main/resources/static/js/chart.min.js,/python/client-side-restriction-bypass/static/js/chart.min.js,/java/csp/src/main/resources/static/js/chart.min.js,/java/xss-stored/src/main/resources/static/js/chart.min.js,/python/CMD3/static/js/chart.min.js,/java/des-java/src/main/resources/static/js/chart.min.js,/java/credentials-guessing1/src/main/resources/static/js/chart.min.js,/java/untrusted-sources/src/main/resources/static/js/chart.min.js,/python/account-provisioning-process/static/js/chart.min.js,/java/jwt-secret/src/main/resources/static/js/chart.min.js,/python/CORS/static/js/chart.min.js,/java/parameter-binding/src/main/resources/static/js/chart.min.js,/python/Attack-Server/static/js/chart.min.js,/java/lfi/src/main/resources/static/js/chart.min.js,/java/graphql-dos-resource-exhaustion/src/main/resources/static/js/chart.min.js,/python/SSTI/static/js/chart.min.js,/java/idor/src/main/resources/static/js/chart.min.js,/python/Untrusted-sources-js/static/js/chart.min.js,/python/X-allow-origin/static/js/chart.min.js,/python/info-leakeage-comments/static/js/chart.min.js,/java/file-upload/src/main/resources/static/js/chart.min.js,/java/cmd4/src/main/resources/static/js/chart.min.js,/python/XXE/static/js/chart.min.js,/python/XSS-DOM-2/static/js/chart.min.js,/java/client-side-restriction-bypass/src/main/resources/static/js/chart.min.js,/java/graphql-mutation/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-1/static/js/chart.min.js,/python/XSS-attribute/static/js/chart.min.js,/python/Unreferenced-files/static/js/chart.min.js,/python/Auth-bypass-simple/static/js/chart.min.js,/python/HTTP-desync-CLTE-backend-server/static/js/chart.min.js,/python/RaceCondition/static/js/chart.min.js,/java/sqli/src/main/resources/static/js/chart.min.js,/python/HTML-injection/static/js/chart.min.js,/java/auth-bypass-simple/src/main/resources/static/js/chart.min.js,/python/Ldap-injection-harder/static/js/chart.min.js,/python/File-upload/static/js/chart.min.js,/java/url-redirection-harder/src/main/resources/static/js/chart.min.js,/python/Url-redirection-harder2/static/js/chart.min.js,/java/ssti/src/main/resources/static/old/js/chart.min.js,/java/info-leakage-metadata/src/main/resources/static/js/chart.min.js,/java/csti/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-2/static/js/chart.min.js,/java/csrf-samesite/src/main/resources/static/js/chart.min.js,/java/csrf/src/main/resources/static/js/chart.min.js,/java/auth-bypass1/src/main/resources/static/js/chart.min.js,/python/CSRF/static/js/chart.min.js,/python/Threat-modeling/static/js/chart.min.js,/nodeJs/Graphql-IDOR/static/js/chart.min.js,/java/client-side-restriction-bypass-2/src/main/resources/static/js/chart.min.js,/python/LFI/static/js/chart.min.js,/java/cmd3/src/main/resources/static/js/chart.min.js,/python/graphql-mutation/static/js/chart.min.js,/python/WebSocket-Message-Manipulation/static/js/chart.min.js,/java/xss-dom/src/main/resources/static/js/chart.min.js,/java/cors/src/main/resources/static/js/chart.min.js,/python/Session-Management-2/static/js/chart.min.js,/python/credentials-guessing-2/static/js/chart.min.js,/python/graphql-dos-resource-exhaustion/static/js/chart.min.js,/python/weak-or-unenforced-username-policy/static/js/chart.min.js,/java/xss-url/src/main/resources/static/js/chart.min.js,/java/auth-bypass3/src/main/resources/static/js/chart.min.js,/python/Ldap-injection/static/js/chart.min.js,/java/des-yaml/src/main/resources/static/js/chart.min.js,/java/url-redirection/src/main/resources/static/js/chart.min.js,/python/CSTI/static/js/chart.min.js,/java/racecondition-file-write/src/main/resources/static/js/chart.min.js,/python/weak-lock-out-mechanism/static/js/chart.min.js,/python/LFI-2/static/js/chart.min.js,/java/graphql-idor/src/main/resources/static/js/chart.min.js
Path to vulnerable library: /python/XSS-url/static/js/chart.min.js,/python/SQLI-like/static/js/chart.min.js,/python/CSP/static/js/chart.min.js,/python/NoSQL/static/js/chart.min.js,/python/CSRF-SameSite/static/js/chart.min.js,/python/CMD/static/js/chart.min.js,/java/jwt-null/src/main/resources/static/js/chart.min.js,/python/CMD2/static/js/chart.min.js,/java/url-redirection-harder2/src/main/resources/static/js/chart.min.js,/python/XSS-DOM/static/js/chart.min.js,/python/graphql-injections/static/js/chart.min.js,/python/Content-type/static/js/chart.min.js,/java/auth-bypass2/src/main/resources/static/js/chart.min.js,/python/JWT-secret/static/js/chart.min.js,/python/http-response-splitting/static/js/chart.min.js,/python/graphql-IDOR/static/js/chart.min.js,/python/Url-redirection/static/js/chart.min.js,/java/ldap-injection/src/main/resources/static/js/chart.min.js,/python/RTLO/static/js/chart.min.js,/python/DES-Pickle/static/js/chart.min.js,/python/DoS-regex/static/js/chart.min.js,/python/DES-Pickle-2/static/js/chart.min.js,/java/cssi/src/main/resources/static/js/chart.min.js,/python/JWT-null/static/js/chart.min.js,/python/user-registration-process/static/js/chart.min.js,/python/Url-redirection-harder/static/js/chart.min.js,/python/client-side-restriction-bypass-2/static/js/chart.min.js,/java/xss/src/main/resources/static/js/chart.min.js,/java/racecondition/src/main/resources/static/js/chart.min.js,/java/content-type/src/main/resources/static/js/chart.min.js,/python/DNS-rebinding/static/js/chart.min.js,/java/csrf-weak/src/main/resources/static/js/chart.min.js,/java/info-leakage-comments/src/main/resources/static/js/chart.min.js,/python/DES-Yaml/static/js/chart.min.js,/python/RFI/static/js/chart.min.js,/python/Web-cache-poisoning/static/js/chart.min.js,/java/lfi3/src/main/resources/static/js/chart.min.js,/python/SQLI-blind/static/js/chart.min.js,/java/graphql-injections/src/main/resources/static/js/chart.min.js,/python/IDOR/static/js/chart.min.js,/python/info-leakeage-metadata/static/js/chart.min.js,/python/CSRF-weak/static/js/chart.min.js,/lab-template/static/js/chart.min.js,/python/ratelimiting/static/js/chart.min.js,/java/lfi2/src/main/resources/static/js/chart.min.js,/python/LFI-3/static/js/chart.min.js,/python/graphql-info-introspection/static/js/chart.min.js,/python/SQLI-login-bypass/static/js/chart.min.js,/python/Formula-injection/static/js/chart.min.js,/java/credentials-guessing2/src/main/resources/static/js/chart.min.js,/c/32_bufferOverflow/static/js/chart.min.js,/python/session-hijacking-xss/static/js/chart.min.js,/python/Auth-bypass/static/js/chart.min.js,/java/sqli-like/src/main/resources/static/js/chart.min.js,/java/rtlo/src/main/resources/static/js/chart.min.js,/java/ssrf/src/main/resources/static/js/chart.min.js,/java/xss-dom2/src/main/resources/static/js/chart.min.js,/python/SessionPuzzle/static/js/chart.min.js,/python/RaceCondition-file-write/static/js/chart.min.js,/java/formula-injection/src/main/resources/static/js/chart.min.js,/java/cmd2/src/main/resources/static/js/chart.min.js,/python/SSRF/static/js/chart.min.js,/python/Host-Header-Authentication-Bypass/static/js/chart.min.js,/python/credentials-guessing-1/static/js/chart.min.js,/python/Session-Management-1/static/js/chart.min.js,/python/CMD4/static/js/chart.min.js,/python/XSS/static/js/chart.min.js,/java/ratelimiting/src/main/resources/static/js/chart.min.js,/java/ssti/src/main/resources/static/js/chart.min.js,/java/ldap-injection-harder/src/main/resources/static/js/chart.min.js,/java/graphql-info-introspection/src/main/resources/static/js/chart.min.js,/python/TLS-downgrade/static/js/chart.min.js,/java/cmd-blind/src/main/resources/static/js/chart.min.js,/java/sqli-blind/src/main/resources/static/js/chart.min.js,/python/CMD-Blind/static/js/chart.min.js,/python/Auth-bypass-3/static/js/chart.min.js,/python/CSSI/static/js/chart.min.js,/java/rfi/src/main/resources/static/js/chart.min.js,/java/cmd/src/main/resources/static/js/chart.min.js,/python/SQLI/static/js/chart.min.js,/nodeJs/Graphql-DOS/static/js/chart.min.js,/java/session-hijacking-xss/src/main/resources/static/js/chart.min.js,/java/xxe/src/main/resources/static/js/chart.min.js,/java/http-response-splitting/src/main/resources/static/js/chart.min.js,/java/dos-regex/src/main/resources/static/js/chart.min.js,/java/sessionpuzzle/src/main/resources/static/js/chart.min.js,/python/client-side-restriction-bypass/static/js/chart.min.js,/java/csp/src/main/resources/static/js/chart.min.js,/java/xss-stored/src/main/resources/static/js/chart.min.js,/python/CMD3/static/js/chart.min.js,/java/des-java/src/main/resources/static/js/chart.min.js,/java/credentials-guessing1/src/main/resources/static/js/chart.min.js,/java/untrusted-sources/src/main/resources/static/js/chart.min.js,/python/account-provisioning-process/static/js/chart.min.js,/java/jwt-secret/src/main/resources/static/js/chart.min.js,/python/CORS/static/js/chart.min.js,/java/parameter-binding/src/main/resources/static/js/chart.min.js,/python/Attack-Server/static/js/chart.min.js,/java/lfi/src/main/resources/static/js/chart.min.js,/java/graphql-dos-resource-exhaustion/src/main/resources/static/js/chart.min.js,/python/SSTI/static/js/chart.min.js,/java/idor/src/main/resources/static/js/chart.min.js,/python/Untrusted-sources-js/static/js/chart.min.js,/python/X-allow-origin/static/js/chart.min.js,/python/info-leakeage-comments/static/js/chart.min.js,/java/file-upload/src/main/resources/static/js/chart.min.js,/java/cmd4/src/main/resources/static/js/chart.min.js,/python/XXE/static/js/chart.min.js,/python/XSS-DOM-2/static/js/chart.min.js,/java/client-side-restriction-bypass/src/main/resources/static/js/chart.min.js,/java/graphql-mutation/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-1/static/js/chart.min.js,/python/XSS-attribute/static/js/chart.min.js,/python/Unreferenced-files/static/js/chart.min.js,/python/Auth-bypass-simple/static/js/chart.min.js,/python/HTTP-desync-CLTE-backend-server/static/js/chart.min.js,/python/RaceCondition/static/js/chart.min.js,/java/sqli/src/main/resources/static/js/chart.min.js,/python/HTML-injection/static/js/chart.min.js,/java/auth-bypass-simple/src/main/resources/static/js/chart.min.js,/python/Ldap-injection-harder/static/js/chart.min.js,/python/File-upload/static/js/chart.min.js,/java/url-redirection-harder/src/main/resources/static/js/chart.min.js,/python/Url-redirection-harder2/static/js/chart.min.js,/java/ssti/src/main/resources/static/old/js/chart.min.js,/java/info-leakage-metadata/src/main/resources/static/js/chart.min.js,/java/csti/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-2/static/js/chart.min.js,/java/csrf-samesite/src/main/resources/static/js/chart.min.js,/java/csrf/src/main/resources/static/js/chart.min.js,/java/auth-bypass1/src/main/resources/static/js/chart.min.js,/python/CSRF/static/js/chart.min.js,/python/Threat-modeling/static/js/chart.min.js,/nodeJs/Graphql-IDOR/static/js/chart.min.js,/java/client-side-restriction-bypass-2/src/main/resources/static/js/chart.min.js,/python/LFI/static/js/chart.min.js,/java/cmd3/src/main/resources/static/js/chart.min.js,/python/graphql-mutation/static/js/chart.min.js,/python/WebSocket-Message-Manipulation/static/js/chart.min.js,/java/xss-dom/src/main/resources/static/js/chart.min.js,/java/cors/src/main/resources/static/js/chart.min.js,/python/Session-Management-2/static/js/chart.min.js,/python/credentials-guessing-2/static/js/chart.min.js,/python/graphql-dos-resource-exhaustion/static/js/chart.min.js,/python/weak-or-unenforced-username-policy/static/js/chart.min.js,/java/xss-url/src/main/resources/static/js/chart.min.js,/java/auth-bypass3/src/main/resources/static/js/chart.min.js,/python/Ldap-injection/static/js/chart.min.js,/java/des-yaml/src/main/resources/static/js/chart.min.js,/java/url-redirection/src/main/resources/static/js/chart.min.js,/python/CSTI/static/js/chart.min.js,/java/racecondition-file-write/src/main/resources/static/js/chart.min.js,/python/weak-lock-out-mechanism/static/js/chart.min.js,/python/LFI-2/static/js/chart.min.js,/java/graphql-idor/src/main/resources/static/js/chart.min.js
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.
Simple HTML5 charts using the canvas element.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/Chart.js/1.0.1-beta.4/Chart.min.js
Path to vulnerable library: /python/XSS-url/static/js/chart.min.js,/python/SQLI-like/static/js/chart.min.js,/python/CSP/static/js/chart.min.js,/python/NoSQL/static/js/chart.min.js,/python/CSRF-SameSite/static/js/chart.min.js,/python/CMD/static/js/chart.min.js,/java/jwt-null/src/main/resources/static/js/chart.min.js,/python/CMD2/static/js/chart.min.js,/java/url-redirection-harder2/src/main/resources/static/js/chart.min.js,/python/XSS-DOM/static/js/chart.min.js,/python/graphql-injections/static/js/chart.min.js,/python/Content-type/static/js/chart.min.js,/java/auth-bypass2/src/main/resources/static/js/chart.min.js,/python/JWT-secret/static/js/chart.min.js,/python/http-response-splitting/static/js/chart.min.js,/python/graphql-IDOR/static/js/chart.min.js,/python/Url-redirection/static/js/chart.min.js,/java/ldap-injection/src/main/resources/static/js/chart.min.js,/python/RTLO/static/js/chart.min.js,/python/DES-Pickle/static/js/chart.min.js,/python/DoS-regex/static/js/chart.min.js,/python/DES-Pickle-2/static/js/chart.min.js,/java/cssi/src/main/resources/static/js/chart.min.js,/python/JWT-null/static/js/chart.min.js,/python/user-registration-process/static/js/chart.min.js,/python/Url-redirection-harder/static/js/chart.min.js,/python/client-side-restriction-bypass-2/static/js/chart.min.js,/java/xss/src/main/resources/static/js/chart.min.js,/java/racecondition/src/main/resources/static/js/chart.min.js,/java/content-type/src/main/resources/static/js/chart.min.js,/python/DNS-rebinding/static/js/chart.min.js,/java/csrf-weak/src/main/resources/static/js/chart.min.js,/java/info-leakage-comments/src/main/resources/static/js/chart.min.js,/python/DES-Yaml/static/js/chart.min.js,/python/RFI/static/js/chart.min.js,/python/Web-cache-poisoning/static/js/chart.min.js,/java/lfi3/src/main/resources/static/js/chart.min.js,/python/SQLI-blind/static/js/chart.min.js,/java/graphql-injections/src/main/resources/static/js/chart.min.js,/python/IDOR/static/js/chart.min.js,/python/info-leakeage-metadata/static/js/chart.min.js,/python/CSRF-weak/static/js/chart.min.js,/lab-template/static/js/chart.min.js,/python/ratelimiting/static/js/chart.min.js,/java/lfi2/src/main/resources/static/js/chart.min.js,/python/LFI-3/static/js/chart.min.js,/python/graphql-info-introspection/static/js/chart.min.js,/python/SQLI-login-bypass/static/js/chart.min.js,/python/Formula-injection/static/js/chart.min.js,/java/credentials-guessing2/src/main/resources/static/js/chart.min.js,/c/32_bufferOverflow/static/js/chart.min.js,/python/session-hijacking-xss/static/js/chart.min.js,/python/Auth-bypass/static/js/chart.min.js,/java/sqli-like/src/main/resources/static/js/chart.min.js,/java/rtlo/src/main/resources/static/js/chart.min.js,/java/ssrf/src/main/resources/static/js/chart.min.js,/java/xss-dom2/src/main/resources/static/js/chart.min.js,/python/SessionPuzzle/static/js/chart.min.js,/python/RaceCondition-file-write/static/js/chart.min.js,/java/formula-injection/src/main/resources/static/js/chart.min.js,/java/cmd2/src/main/resources/static/js/chart.min.js,/python/SSRF/static/js/chart.min.js,/python/Host-Header-Authentication-Bypass/static/js/chart.min.js,/python/credentials-guessing-1/static/js/chart.min.js,/python/Session-Management-1/static/js/chart.min.js,/python/CMD4/static/js/chart.min.js,/python/XSS/static/js/chart.min.js,/java/ratelimiting/src/main/resources/static/js/chart.min.js,/java/ssti/src/main/resources/static/js/chart.min.js,/java/ldap-injection-harder/src/main/resources/static/js/chart.min.js,/java/graphql-info-introspection/src/main/resources/static/js/chart.min.js,/python/TLS-downgrade/static/js/chart.min.js,/java/cmd-blind/src/main/resources/static/js/chart.min.js,/java/sqli-blind/src/main/resources/static/js/chart.min.js,/python/CMD-Blind/static/js/chart.min.js,/python/Auth-bypass-3/static/js/chart.min.js,/python/CSSI/static/js/chart.min.js,/java/rfi/src/main/resources/static/js/chart.min.js,/java/cmd/src/main/resources/static/js/chart.min.js,/python/SQLI/static/js/chart.min.js,/nodeJs/Graphql-DOS/static/js/chart.min.js,/java/session-hijacking-xss/src/main/resources/static/js/chart.min.js,/java/xxe/src/main/resources/static/js/chart.min.js,/java/http-response-splitting/src/main/resources/static/js/chart.min.js,/java/dos-regex/src/main/resources/static/js/chart.min.js,/java/sessionpuzzle/src/main/resources/static/js/chart.min.js,/python/client-side-restriction-bypass/static/js/chart.min.js,/java/csp/src/main/resources/static/js/chart.min.js,/java/xss-stored/src/main/resources/static/js/chart.min.js,/python/CMD3/static/js/chart.min.js,/java/des-java/src/main/resources/static/js/chart.min.js,/java/credentials-guessing1/src/main/resources/static/js/chart.min.js,/java/untrusted-sources/src/main/resources/static/js/chart.min.js,/python/account-provisioning-process/static/js/chart.min.js,/java/jwt-secret/src/main/resources/static/js/chart.min.js,/python/CORS/static/js/chart.min.js,/java/parameter-binding/src/main/resources/static/js/chart.min.js,/python/Attack-Server/static/js/chart.min.js,/java/lfi/src/main/resources/static/js/chart.min.js,/java/graphql-dos-resource-exhaustion/src/main/resources/static/js/chart.min.js,/python/SSTI/static/js/chart.min.js,/java/idor/src/main/resources/static/js/chart.min.js,/python/Untrusted-sources-js/static/js/chart.min.js,/python/X-allow-origin/static/js/chart.min.js,/python/info-leakeage-comments/static/js/chart.min.js,/java/file-upload/src/main/resources/static/js/chart.min.js,/java/cmd4/src/main/resources/static/js/chart.min.js,/python/XXE/static/js/chart.min.js,/python/XSS-DOM-2/static/js/chart.min.js,/java/client-side-restriction-bypass/src/main/resources/static/js/chart.min.js,/java/graphql-mutation/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-1/static/js/chart.min.js,/python/XSS-attribute/static/js/chart.min.js,/python/Unreferenced-files/static/js/chart.min.js,/python/Auth-bypass-simple/static/js/chart.min.js,/python/HTTP-desync-CLTE-backend-server/static/js/chart.min.js,/python/RaceCondition/static/js/chart.min.js,/java/sqli/src/main/resources/static/js/chart.min.js,/python/HTML-injection/static/js/chart.min.js,/java/auth-bypass-simple/src/main/resources/static/js/chart.min.js,/python/Ldap-injection-harder/static/js/chart.min.js,/python/File-upload/static/js/chart.min.js,/java/url-redirection-harder/src/main/resources/static/js/chart.min.js,/python/Url-redirection-harder2/static/js/chart.min.js,/java/ssti/src/main/resources/static/old/js/chart.min.js,/java/info-leakage-metadata/src/main/resources/static/js/chart.min.js,/java/csti/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-2/static/js/chart.min.js,/java/csrf-samesite/src/main/resources/static/js/chart.min.js,/java/csrf/src/main/resources/static/js/chart.min.js,/java/auth-bypass1/src/main/resources/static/js/chart.min.js,/python/CSRF/static/js/chart.min.js,/python/Threat-modeling/static/js/chart.min.js,/nodeJs/Graphql-IDOR/static/js/chart.min.js,/java/client-side-restriction-bypass-2/src/main/resources/static/js/chart.min.js,/python/LFI/static/js/chart.min.js,/java/cmd3/src/main/resources/static/js/chart.min.js,/python/graphql-mutation/static/js/chart.min.js,/python/WebSocket-Message-Manipulation/static/js/chart.min.js,/java/xss-dom/src/main/resources/static/js/chart.min.js,/java/cors/src/main/resources/static/js/chart.min.js,/python/Session-Management-2/static/js/chart.min.js,/python/credentials-guessing-2/static/js/chart.min.js,/python/graphql-dos-resource-exhaustion/static/js/chart.min.js,/python/weak-or-unenforced-username-policy/static/js/chart.min.js,/java/xss-url/src/main/resources/static/js/chart.min.js,/java/auth-bypass3/src/main/resources/static/js/chart.min.js,/python/Ldap-injection/static/js/chart.min.js,/java/des-yaml/src/main/resources/static/js/chart.min.js,/java/url-redirection/src/main/resources/static/js/chart.min.js,/python/CSTI/static/js/chart.min.js,/java/racecondition-file-write/src/main/resources/static/js/chart.min.js,/python/weak-lock-out-mechanism/static/js/chart.min.js,/python/LFI-2/static/js/chart.min.js,/java/graphql-idor/src/main/resources/static/js/chart.min.js
Found in HEAD commit: dbff3320673205dea2e0a4c513d54497ca905aab
Vulnerabilities
**In some cases, Remediation PR cannot be created automatically for a vulnerability despite the availability of remediation
Details
CVE-2020-7746
### Vulnerable Library - Chart-1.0.1-beta.4.min.jsSimple HTML5 charts using the canvas element.
Library home page: https://cdnjs.cloudflare.com/ajax/libs/Chart.js/1.0.1-beta.4/Chart.min.js
Path to vulnerable library: /python/XSS-url/static/js/chart.min.js,/python/SQLI-like/static/js/chart.min.js,/python/CSP/static/js/chart.min.js,/python/NoSQL/static/js/chart.min.js,/python/CSRF-SameSite/static/js/chart.min.js,/python/CMD/static/js/chart.min.js,/java/jwt-null/src/main/resources/static/js/chart.min.js,/python/CMD2/static/js/chart.min.js,/java/url-redirection-harder2/src/main/resources/static/js/chart.min.js,/python/XSS-DOM/static/js/chart.min.js,/python/graphql-injections/static/js/chart.min.js,/python/Content-type/static/js/chart.min.js,/java/auth-bypass2/src/main/resources/static/js/chart.min.js,/python/JWT-secret/static/js/chart.min.js,/python/http-response-splitting/static/js/chart.min.js,/python/graphql-IDOR/static/js/chart.min.js,/python/Url-redirection/static/js/chart.min.js,/java/ldap-injection/src/main/resources/static/js/chart.min.js,/python/RTLO/static/js/chart.min.js,/python/DES-Pickle/static/js/chart.min.js,/python/DoS-regex/static/js/chart.min.js,/python/DES-Pickle-2/static/js/chart.min.js,/java/cssi/src/main/resources/static/js/chart.min.js,/python/JWT-null/static/js/chart.min.js,/python/user-registration-process/static/js/chart.min.js,/python/Url-redirection-harder/static/js/chart.min.js,/python/client-side-restriction-bypass-2/static/js/chart.min.js,/java/xss/src/main/resources/static/js/chart.min.js,/java/racecondition/src/main/resources/static/js/chart.min.js,/java/content-type/src/main/resources/static/js/chart.min.js,/python/DNS-rebinding/static/js/chart.min.js,/java/csrf-weak/src/main/resources/static/js/chart.min.js,/java/info-leakage-comments/src/main/resources/static/js/chart.min.js,/python/DES-Yaml/static/js/chart.min.js,/python/RFI/static/js/chart.min.js,/python/Web-cache-poisoning/static/js/chart.min.js,/java/lfi3/src/main/resources/static/js/chart.min.js,/python/SQLI-blind/static/js/chart.min.js,/java/graphql-injections/src/main/resources/static/js/chart.min.js,/python/IDOR/static/js/chart.min.js,/python/info-leakeage-metadata/static/js/chart.min.js,/python/CSRF-weak/static/js/chart.min.js,/lab-template/static/js/chart.min.js,/python/ratelimiting/static/js/chart.min.js,/java/lfi2/src/main/resources/static/js/chart.min.js,/python/LFI-3/static/js/chart.min.js,/python/graphql-info-introspection/static/js/chart.min.js,/python/SQLI-login-bypass/static/js/chart.min.js,/python/Formula-injection/static/js/chart.min.js,/java/credentials-guessing2/src/main/resources/static/js/chart.min.js,/c/32_bufferOverflow/static/js/chart.min.js,/python/session-hijacking-xss/static/js/chart.min.js,/python/Auth-bypass/static/js/chart.min.js,/java/sqli-like/src/main/resources/static/js/chart.min.js,/java/rtlo/src/main/resources/static/js/chart.min.js,/java/ssrf/src/main/resources/static/js/chart.min.js,/java/xss-dom2/src/main/resources/static/js/chart.min.js,/python/SessionPuzzle/static/js/chart.min.js,/python/RaceCondition-file-write/static/js/chart.min.js,/java/formula-injection/src/main/resources/static/js/chart.min.js,/java/cmd2/src/main/resources/static/js/chart.min.js,/python/SSRF/static/js/chart.min.js,/python/Host-Header-Authentication-Bypass/static/js/chart.min.js,/python/credentials-guessing-1/static/js/chart.min.js,/python/Session-Management-1/static/js/chart.min.js,/python/CMD4/static/js/chart.min.js,/python/XSS/static/js/chart.min.js,/java/ratelimiting/src/main/resources/static/js/chart.min.js,/java/ssti/src/main/resources/static/js/chart.min.js,/java/ldap-injection-harder/src/main/resources/static/js/chart.min.js,/java/graphql-info-introspection/src/main/resources/static/js/chart.min.js,/python/TLS-downgrade/static/js/chart.min.js,/java/cmd-blind/src/main/resources/static/js/chart.min.js,/java/sqli-blind/src/main/resources/static/js/chart.min.js,/python/CMD-Blind/static/js/chart.min.js,/python/Auth-bypass-3/static/js/chart.min.js,/python/CSSI/static/js/chart.min.js,/java/rfi/src/main/resources/static/js/chart.min.js,/java/cmd/src/main/resources/static/js/chart.min.js,/python/SQLI/static/js/chart.min.js,/nodeJs/Graphql-DOS/static/js/chart.min.js,/java/session-hijacking-xss/src/main/resources/static/js/chart.min.js,/java/xxe/src/main/resources/static/js/chart.min.js,/java/http-response-splitting/src/main/resources/static/js/chart.min.js,/java/dos-regex/src/main/resources/static/js/chart.min.js,/java/sessionpuzzle/src/main/resources/static/js/chart.min.js,/python/client-side-restriction-bypass/static/js/chart.min.js,/java/csp/src/main/resources/static/js/chart.min.js,/java/xss-stored/src/main/resources/static/js/chart.min.js,/python/CMD3/static/js/chart.min.js,/java/des-java/src/main/resources/static/js/chart.min.js,/java/credentials-guessing1/src/main/resources/static/js/chart.min.js,/java/untrusted-sources/src/main/resources/static/js/chart.min.js,/python/account-provisioning-process/static/js/chart.min.js,/java/jwt-secret/src/main/resources/static/js/chart.min.js,/python/CORS/static/js/chart.min.js,/java/parameter-binding/src/main/resources/static/js/chart.min.js,/python/Attack-Server/static/js/chart.min.js,/java/lfi/src/main/resources/static/js/chart.min.js,/java/graphql-dos-resource-exhaustion/src/main/resources/static/js/chart.min.js,/python/SSTI/static/js/chart.min.js,/java/idor/src/main/resources/static/js/chart.min.js,/python/Untrusted-sources-js/static/js/chart.min.js,/python/X-allow-origin/static/js/chart.min.js,/python/info-leakeage-comments/static/js/chart.min.js,/java/file-upload/src/main/resources/static/js/chart.min.js,/java/cmd4/src/main/resources/static/js/chart.min.js,/python/XXE/static/js/chart.min.js,/python/XSS-DOM-2/static/js/chart.min.js,/java/client-side-restriction-bypass/src/main/resources/static/js/chart.min.js,/java/graphql-mutation/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-1/static/js/chart.min.js,/python/XSS-attribute/static/js/chart.min.js,/python/Unreferenced-files/static/js/chart.min.js,/python/Auth-bypass-simple/static/js/chart.min.js,/python/HTTP-desync-CLTE-backend-server/static/js/chart.min.js,/python/RaceCondition/static/js/chart.min.js,/java/sqli/src/main/resources/static/js/chart.min.js,/python/HTML-injection/static/js/chart.min.js,/java/auth-bypass-simple/src/main/resources/static/js/chart.min.js,/python/Ldap-injection-harder/static/js/chart.min.js,/python/File-upload/static/js/chart.min.js,/java/url-redirection-harder/src/main/resources/static/js/chart.min.js,/python/Url-redirection-harder2/static/js/chart.min.js,/java/ssti/src/main/resources/static/old/js/chart.min.js,/java/info-leakage-metadata/src/main/resources/static/js/chart.min.js,/java/csti/src/main/resources/static/js/chart.min.js,/python/Auth-bypass-2/static/js/chart.min.js,/java/csrf-samesite/src/main/resources/static/js/chart.min.js,/java/csrf/src/main/resources/static/js/chart.min.js,/java/auth-bypass1/src/main/resources/static/js/chart.min.js,/python/CSRF/static/js/chart.min.js,/python/Threat-modeling/static/js/chart.min.js,/nodeJs/Graphql-IDOR/static/js/chart.min.js,/java/client-side-restriction-bypass-2/src/main/resources/static/js/chart.min.js,/python/LFI/static/js/chart.min.js,/java/cmd3/src/main/resources/static/js/chart.min.js,/python/graphql-mutation/static/js/chart.min.js,/python/WebSocket-Message-Manipulation/static/js/chart.min.js,/java/xss-dom/src/main/resources/static/js/chart.min.js,/java/cors/src/main/resources/static/js/chart.min.js,/python/Session-Management-2/static/js/chart.min.js,/python/credentials-guessing-2/static/js/chart.min.js,/python/graphql-dos-resource-exhaustion/static/js/chart.min.js,/python/weak-or-unenforced-username-policy/static/js/chart.min.js,/java/xss-url/src/main/resources/static/js/chart.min.js,/java/auth-bypass3/src/main/resources/static/js/chart.min.js,/python/Ldap-injection/static/js/chart.min.js,/java/des-yaml/src/main/resources/static/js/chart.min.js,/java/url-redirection/src/main/resources/static/js/chart.min.js,/python/CSTI/static/js/chart.min.js,/java/racecondition-file-write/src/main/resources/static/js/chart.min.js,/python/weak-lock-out-mechanism/static/js/chart.min.js,/python/LFI-2/static/js/chart.min.js,/java/graphql-idor/src/main/resources/static/js/chart.min.js
Dependency Hierarchy: - :x: **Chart-1.0.1-beta.4.min.js** (Vulnerable Library)
Found in HEAD commit: dbff3320673205dea2e0a4c513d54497ca905aab
Found in base branch: master
### Vulnerability DetailsThis affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) are deeply merged with provided options. However, during this operation, the keys of the object being set are not checked, leading to a prototype pollution.
Publish Date: 2020-10-29
URL: CVE-2020-7746
### CVSS 3 Score Details (7.5)Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here. ### Suggested FixType: Upgrade version
Origin: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7746
Release Date: 2020-10-29
Fix Resolution: chart.js - 2.9.4