Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.2%	CVE-2026-1513NAVER billboard.js · Cross-site Scripting Medium6.1EPSS 0.2%2026-01-28CVE Database V5CVE-2026-1513 billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization during chart option binding. EPSS 0.2%Vulnerability CWE-79	CVE Database V5	2026-01-28
Critical	9.8	EPSS 0.8%	CVE-2025-49223NAVER billboard.js · Prototype Pollution Critical9.8EPSS 0.8%2025-06-04CVE Database V5CVE-2025-49223 billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties. EPSS 0.8%Vulnerability CWE-1321	CVE Database V5	2025-06-04

Page 1 of 1