Vulnerabilities (CVE)

Filtered by vendor Client Subscribe
Filtered by product Jointjs
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23444 1 Client 1 Jointjs 2024-11-21 7.5 HIGH 5.6 MEDIUM
This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used in the path parameter are arrays in the setByPath function.