high7.3
CVE-2019-18841
Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.
Impact
Chartkick.js 3.1.0 through 3.1.3, as used in the Chartkick gem before 3.3.0 for Ruby, allows prototype pollution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chartkick | Chartkick.Js | from 3.1.0 through 3.1.3 |
References
- NVD record
- CVE.org record
- https://chartkick.com
- https://github.com/ankane/chartkick.js/issues/117
- https://github.com/ankane/chartkick/blob/master/CHANGELOG.md
- https://github.com/ankane/chartkick/commit/b810936bbf687bc74c5b6dba72d2397a399885fa
- https://github.com/ankane/chartkick/commits/master
- https://rubygems.org/gems/chartkick/
- https://chartkick.com
- https://github.com/ankane/chartkick.js/issues/117
- https://github.com/ankane/chartkick/blob/master/CHANGELOG.md
- https://github.com/ankane/chartkick/commit/b810936bbf687bc74c5b6dba72d2397a399885fa
- https://github.com/ankane/chartkick/commits/master
- https://rubygems.org/gems/chartkick/