Bundled JavaScript libraries flagged with known flaws
Bundled JavaScript libraries carry known prototype pollution and XSS flaws that site owners' scanners flag.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 28 October 2024 · last reported 7 November 2024
What's going wrong
Several site owners running the Visualizer chart plugin report that security scanners flag libraries bundled inside it, including a DataTables component with prototype pollution and an old React rendering library with cross-site scripting issues.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.