CRITICAL9.8npm
GHSA-65p9-j6pg-72hj· CVE-2025-49223billboard.js allows prototype pollution via the function generate
Modified: 7/29/2025
package
npm/billboard.js
pkg:npm/billboard.js
HIGH7.1npm
GHSA-rpc5-pm7q-hjmp· CVE-2026-1513billboard.js is vulnerable to XSS during chart option binding
Modified: 2/3/2026