billboard.js vulnerabilities

CVEs whose affected-version data names the billboard.js package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-120988Medium· 6.1PoC

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.

billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids during legend template rendering.

▾ TwilightNAVER · billboard.jsEPSS 0.15%via CVEORG

billboard.js vulnerabilities (CVEs) · VulnSea