PL
Vendor
Plotly
4
CVEs
0
On KEV
0
New 30D
Products
PL9.8
Plotly.js
Plotly
2 CVEs0 on KEV0 new
DA5.4
Dash
Plotly
1 CVEs0 on KEV0 new
PG8.1
Plotly.js Graphing
Plotly
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-55810 | PG Plotly.js Graphing Plotly | 8.1 | Jul 10 | Plotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050 |
| CVE-2024-21485 | DA Dash Plotly | 5.4 | Feb 2 | Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the… |
| CVE-2023-46308 | PL Plotly.js Plotly | 9.8 | Jan 3 | In Plotly plotly.js before 2.25.2, plot API calls have a risk of __proto__ being polluted in expandObjectPaths or nestedProperty |
| CVE-2017-1000006 | PL Plotly.js Plotly | 6.1 | Jul 17 | Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue |