Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-49223

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Ser

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
naver

Description

billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NAVER billboard.js

Default version status: affected

  • 3.15.1unaffected

References