Vulnerabilities (CVE)

Filtered by vendor Client Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-23444 1 Client 1 Jointjs 2023-12-10 7.5 HIGH 9.8 CRITICAL
This affects the package jointjs before 3.4.2. A type confusion vulnerability can lead to a bypass of CVE-2020-28480 when the user-provided keys used in the path parameter are arrays in the setByPath function.